Unscored severity · published Jan 14, 2011
CVE-2011-0473
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 8.0.552.237 · source: NVD
CO
Chrome OS · Google
before 8.0.552.344 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0473
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0473
Permissions Required
http://code.google.com/p/chromium/issues/detail?id=66560
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html
Broken Link
http://osvdb.org/70456
Third Party Advisory
http://secunia.com/advisories/42951
Third Party Advisory
http://www.securityfocus.com/bid/45788
Third Party Advisory
http://www.srware.net/forum/viewtopic.php?f=18&t=2054
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability