Bug 386237

Summary:	<www-client/chromium-14.0.835.202 stale pointer in the WebKit engine
Product:	Gentoo Security	Reporter:	Michael Harrison <n0idx80>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.vupen.com/english/services/tpp-index.php
Whiteboard:
Package list:		Runtime testing required:	---

Description Michael Harrison 2011-10-08 08:33:24 UTC

The vulnerability is caused by a stale pointer in the WebKit engine when
deleting a Ruby tag and its children in a specific order, which could be
exploited by remote attackers to compromise a vulnerable system via a
specially crafted web page.

Comment 1 Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2011-10-17 17:28:53 UTC

There are no specifics in your report, and it seems to suggest www-client/chromium-14.0.835.202 is *not* vulnerable, and we already have a bug for that one.

*** This bug has been marked as a duplicate of bug 385649 ***