CVE-2011-0473

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with…

published January 14, 2011

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

⚠️ A mismanaged CSS token in Google Chrome could lead to a denial of service—like a restaurant getting overwhelmed by a sudden rush of orders! Imagine a restaurant that’s not prepared for a late-night crowd. Suddenly, they get flooded with too many orders and it spirals out of control, leading to chaos in the kitchen. Similarly, this bug in Chrome can cause a crash when the browser mishandles CSS with CANVAS elements. Attackers could exploit this to crash the browser, rendering it unusable. While the severity is marked as unknown, the result could be frustrating for users trying to browse the web, as their experience would be abruptly interrupted.

Put simply

Imagine a restaurant that’s not prepared for a late-night crowd. Suddenly, they get flooded with too many orders and it spirals out of control, leading to chaos in the kitchen. Similarly, this bug in Chrome can cause a crash when the browser mishandles CSS with CANVAS elements. This vulnerability arises from improper handling of CSS token sequences in conjunction with CANVAS elements, potentially leading to stale pointers that can induce a denial of service condition.

What to do

Attackers could exploit this to crash the browser, rendering it unusable. While the severity is marked as unknown, the result could be frustrating for users trying to browse the web, as their experience would be abruptly interrupted. Upgrade Google Chrome to version 8.0.552.237 or later and ensure Chrome OS is updated to 8.0.552.344. Regularly check for browser updates to stay protected from similar issues. You’ve got this! Keep your browser updated and enjoy a smooth browsing experience! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02411 · 83.9th percentile
Published
2011-01-14T16:00Z
EPSS history
Timeline
  • 14 JAN 16:00Z
    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with…
    cvelistv5