CVE-2011-0473

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-14 · updated 2026-06-16

Description

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

Affected products

Google Chrome: before 8.0.552.237 — fixed in 8.0.552.237
Google ChromeOS: before 8.0.552.344 — fixed in 8.0.552.344

How to fix

Upgrade to a fixed version: Google Chrome 8.0.552.237; Google ChromeOS 8.0.552.344. Check the vendor advisory for mitigations.

References

http://code.google.com/p/chromium/issues/detail?id=66560
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html
http://osvdb.org/70456
http://secunia.com/advisories/42951
http://www.securityfocus.com/bid/45788
http://www.srware.net/forum/viewtopic.php?f=18&t=2054
https://exchange.xforce.ibmcloud.com/vulnerabilities/64664
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14460
http://code.google.com/p/chromium/issues/detail?id=66560
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html
http://osvdb.org/70456
http://secunia.com/advisories/42951

Get alerted when CVE-2011-0473 or the next vulnerability affects your stack