CVE-2011-1459

EUVD-2011-1464 · Published Nov 5, 2019

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service (crash) via the htmlpluginelement.cpp plugin.

Technologies

Google Blink

Weaknesses

CWE-400

CVSS scores

v3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
v2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Impact

T1190Exploit Public-Facing Application T1499Endpoint Denial of Service

References

https://bugs.chromium.org/p/chromium/issues/detail?id=76474
http://trac.webkit.org/changeset/81795
http://trac.webkit.org/changeset/81891

Potentially impacted assets

See if this affects your attack surface

CVE-2011-1459

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts