OSVDB ID: 78547 Title: WebKit contextElementForInsertion Function Adjacent HTML Insertion Memory Corruption |
Info |
|
|
Dates |
||||
|
|
Description |
WebKit contains a flaw in the 'contextElementForInsertion' function in html/HTMLElement.cpp that is triggered when handling the 'insertAdjacentHTML' method. With a specially crafted web page, a context-dependent attacker can corrupt memory to cause a denial of service or potentially execute arbitrary code. |
Classification |
Location:
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Patch / RCS Exploit: PoC Public Disclosure: Vendor Verified, Coordinated Disclosure OSVDB: Web Related |
Solution |
The vendor has released a patch to address this vulnerability. There are no known workarounds or upgrades to correct this issue. Check the vendor advisory, changelog, or solution in the references section for details. Upgrade to Google Chrome version 16.0.912.77 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |