CVE-2011-2808 Other in Chrome

Medium 6.5 Published Updated

A stale layout root issue in WebKit allows potential instability or unexpected behavior when accessing keygen elements with autofocus.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2011-2808?

CVE-2011-2808 is a medium-severity vulnerability in Google Chrome, published on 6 Nov 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.

Weakness: CWE-20

Which versions are affected by CVE-2011-2808?

It affects 1 product.

Products include Google Blink.

How do I fix CVE-2011-2808?

No fix has been published for CVE-2011-2808 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-2808 being exploited?

There is no known exploitation of CVE-2011-2808 in the wild and no public exploit code.

Sources

Also known as GHSA-7rmf-f3fj-4gh7.

Is CVE-2011-2808 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free