Unscored severity · published Jan 14, 2011
CVE-2011-0474
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 8.0.552.237 · source: NVD
CO
Chrome OS · Google
before 8.0.552.344 · source: NVD
DL
Debian Linux · Debian
6.0; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0474
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0474
Exploit
http://code.google.com/p/chromium/issues/detail?id=66748
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html
Broken Link
http://osvdb.org/70457
Third Party Advisory
http://secunia.com/advisories/42951
Third Party Advisory
http://www.debian.org/security/2011/dsa-2188
Third Party Advisory
http://www.securityfocus.com/bid/45788
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability