CVE-2011-1451 describes a denial-of-service vulnerability in Google Chrome versions prior to 11.0.696.57, also affecting other products utilizing the Chrome engine like Apple Safari and iTunes. The flaw stems from improper handling of DOM ID maps, leading to "dangling pointers" that remote attackers can leverage. With a CVSS score of 7.5, this vulnerability is considered high severity, requiring no authentication and low attack complexity, potentially leading to denial of service and possibly other unspecified impacts. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 11.0.696.57CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
< 10.5CPE matchmatch criteria | cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:* | ||
< 5.0.6CPE matchmatch criteria | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* | ||
< 5.0CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.