漏洞关键信息 Vulnerability Details Description: RIP goes to zero with select tag, and form validation message with position:relative Vulnerability Details: rip == 0, or null pointer deref at 0x88 Version: - Chrome Version: Chromium 12.0.710.0 (Developer Build 78857) Ubuntu 10.10 - WebKit: 534.26 (trunk@81520) Operating System: Ubuntu 10.10; Linux 2.6.35-28-generic #49-Ubuntu SMP Tue Mar 1 14:39:03 UTC 2011 x86_64 Reproduction Case Attached (27.html, 515 B) Type of Crash Type of crash: tab Crash State: Additional Information Tools bisect says: - Changelog Issue Metadata Type: Vulnerability Priority: P1 Severity: S1 Status: Fixed CVE: 2011-1447 Component: Blink Labels: - Vulnerability - P1 - Security_Impact-Stable - CVE_description-submitted