WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
References
Link Resource
http://trac.webkit.org/changeset/81648 Mailing List Patch Vendor Advisory
http://trac.webkit.org/changeset/81748 Mailing List Patch Vendor Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=76784 Exploit Mailing List Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-11-05T22:04:15

Updated: 2019-11-05T22:04:15

Reserved: 2011-03-18T00:00:00


Link: CVE-2011-1460

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2019-11-05T23:15:10.710

Modified: 2019-11-13T16:22:09.973


Link: CVE-2011-1460

JSON object: View

cve-icon Redhat Information

No data.

CWE