CVE-2011-1059

Description

Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form, related to improper handling of provisional items by the HistoryController component, aka rdar problem 8938557.

Weakness classification

• CWE-416: Use After Free

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Patch, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
• cve@mitre.org — VDB Entry
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory