CVE-2011-1794

Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.

Score

CVSS 2.0 7.5 High

Status

Modified - chrome-cve-admin@google.com

Published

2014-12-26

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Chrome (Google)

References

• http://crbug.com/78327
• http://launchpad.net/bugs/778822
• http://trac.webkit.org/changeset/84422