WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/43068 | third-party-advisory x_refsource_SECUNIA |
| http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2011/0212 | vdb-entry x_refsource_VUPEN |
| http://trac.webkit.org/changeset/50173 | x_refsource_CONFIRM |
| https://bugs.webkit.org/show_bug.cgi?id=30833 | x_refsource_CONFIRM |
| http://codereview.chromium.org/339039 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54297 | vdb-entry x_refsource_XF |
| http://code.google.com/p/chromium/issues/detail?id=25892 | x_refsource_CONFIRM |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | vendor-advisory x_refsource_SUSE |
| http://src.chromium.org/viewvc/chrome?view=rev&revision=30311 | x_refsource_CONFIRM |
| http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310 | x_refsource_CONFIRM |
| http://www.osvdb.org/59745 | vdb-entry x_refsource_OSVDB |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 5.0 | MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://code.google.com/p/chromium/issues/detail?id=25892 | cve@mitre.org | N/A |
| http://codereview.chromium.org/339039 | cve@mitre.org | Patch |
| http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html | cve@mitre.org | Vendor Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | cve@mitre.org | N/A |
| http://secunia.com/advisories/43068 | cve@mitre.org | N/A |
| http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310 | cve@mitre.org | N/A |
| http://src.chromium.org/viewvc/chrome?view=rev&revision=30311 | cve@mitre.org | N/A |
| http://trac.webkit.org/changeset/50173 | cve@mitre.org | N/A |
| http://www.osvdb.org/59745 | cve@mitre.org | N/A |
| http://www.vupen.com/english/advisories/2011/0212 | cve@mitre.org | N/A |
| https://bugs.webkit.org/show_bug.cgi?id=30833 | cve@mitre.org | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54297 | cve@mitre.org | N/A |