WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a > sequence. Affected PlatformsGoogle ChromeApple Webkit Weakness TypeCWE-94 Referenceshttp://code.google.com/p/chromium/issues/detail?id=31692http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://secunia.com/advisories/38545http://secunia.com/advisories/41856http://secunia.com/advisories/43068
CWE-94