Unscored severity · published Mar 11, 2011
CVE-2011-1290
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before…
–
CVSS
9.8%
EPSS
No
On KEV
Description
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BT
Blackberry Torch 9800 · Rim
All versions, or not specified · source: NVD
BT
Blackberry Torch 9800 Firmware · Rim
6.0.0.246 · source: NVD
WE
Webkit · Apple
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1290
dvlabs.tippingpoint.com
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html
osvdb.org
http://osvdb.org/71182
More from Webkit
8.8
CVE-2017-7160
An issue was discovered in certain Apple products
8.8
CVE-2017-7157
An issue was discovered in certain Apple products
8.8
CVE-2017-7156
An issue was discovered in certain Apple products
8.8
CVE-2017-13870
An issue was discovered in certain Apple products
8.8
CVE-2017-13866
An issue was discovered in certain Apple products