CVE-2011-1204

Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via a crafted document.

Affected products

Google Chrome, Safari

Google Chrome

< 10.0.648.127

CVSS 2.0

6.8 MEDIUM

EPSS

1.5% (73th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2011-03-11