← Vulnerability feed

Vulnerability record · CVE-2011-1290 · published 11 March 2011

CVE-2011-1290: Apple webkit vulnerability

Apple · Webkit

Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.

10.0 CVSS 2.0 High EPSS 9.8% · top 4.6% CWE-189 · CWE-189
10.0CVSS 2.0 base score
9.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
50References
16 Jun 2026Last modified by NVD

Description

Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html
http://osvdb.org/71182
http://secunia.com/advisories/43735 Vendor Advisory
http://secunia.com/advisories/43748 Vendor Advisory
http://secunia.com/advisories/43782 Vendor Advisory
http://secunia.com/advisories/44151 Vendor Advisory
http://secunia.com/advisories/44154 Vendor Advisory
http://support.apple.com/kb/HT4596
http://support.apple.com/kb/HT4607
http://www.blackberry.com/btsc/KB26132
http://www.debian.org/security/2011/dsa-2192
http://www.securityfocus.com/archive/1/517513/100/0/threaded
http://www.securityfocus.com/bid/46849
http://www.securitytracker.com/id?1025212
http://www.vupen.com/english/advisories/2011/0645 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0654 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0671
http://www.vupen.com/english/advisories/2011/0984 Vendor Advisory
http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401
http://www.zerodayinitiative.com/advisories/ZDI-11-104
https://exchange.xforce.ibmcloud.com/vulnerabilities/66052
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html
http://osvdb.org/71182
http://secunia.com/advisories/43735 Vendor Advisory
http://secunia.com/advisories/43748 Vendor Advisory
http://secunia.com/advisories/43782 Vendor Advisory
http://secunia.com/advisories/44151 Vendor Advisory
http://secunia.com/advisories/44154 Vendor Advisory
http://support.apple.com/kb/HT4596
http://support.apple.com/kb/HT4607
http://www.blackberry.com/btsc/KB26132
http://www.debian.org/security/2011/dsa-2192

Track CVE-2011-1290 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-1386Apple webkit permissions and access controls vulnerabilitypage/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has un…EPSS 2.1%10.0CVE-2010-1760Apple webkit vulnerabilityloader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials duri…EPSS 2.6%9.3CVE-2011-0222Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 22%9.3CVE-2011-0223Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 3.6%9.3CVE-2011-0225Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 3.9%9.3CVE-2011-0232Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 3.9%9.3CVE-2011-0233Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 3.9%9.3CVE-2011-0234Apple safari memory buffer overflow vulnerabilityWebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…EPSS 3.9%

Source: NIST National Vulnerability Database (record CVE-2011-1290), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.