CVE-2011-1691

The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.

• CWE-476

• http://code.google.com/p/chromium/issues/detail?id=77665Exploit, Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.htmlVendor Advisory
• http://trac.webkit.org/changeset/82222Patch
• https://bugs.webkit.org/show_bug.cgi?id=57266Exploit, Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66818Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=77665Exploit, Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.htmlVendor Advisory
• http://trac.webkit.org/changeset/82222Patch
• https://bugs.webkit.org/show_bug.cgi?id=57266Exploit, Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66818Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365Third Party Advisory

Published

Apr 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1685Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc …
• CVE-2011-1686Multiple SQL injection vulnerabilities in Best Practical Sol…
• CVE-2011-1687Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 thro…
• CVE-2011-1688Directory traversal vulnerability in Best Practical Solution…
• CVE-2011-1689Multiple cross-site scripting (XSS) vulnerabilities in Best …
• CVE-2011-1690Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 t…
• CVE-2011-1696Cross-site scripting (XSS) vulnerability in Novell Identity …
• CVE-2011-1699Heap-based buffer overflow in nipplib.dll in Novell iPrint C…
• CVE-2011-1700Heap-based buffer overflow in nipplib.dll in Novell iPrint C…
• CVE-2011-1701Heap-based buffer overflow in nipplib.dll in Novell iPrint C…
• CVE-2011-1702Heap-based buffer overflow in nipplib.dll in Novell iPrint C…
• CVE-2011-1703Heap-based buffer overflow in nipplib.dll in Novell iPrint C…