10
CVSSv2

CVE-2010-4203

Published: 06/11/2010 Updated: 07/11/2023
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

WebM libvpx (aka the VP8 Codec SDK) prior to 0.9.5, as used in Google Chrome prior to 7.0.517.44, allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

webmproject libvpx

redhat enterprise linux desktop 6.0

redhat enterprise linux server 6.0

redhat enterprise linux workstation 6.0

Vendor Advisories

Debian Bug report logs - #602693 Memory corruption in libvpx Package: libvpx; Maintainer for libvpx is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Sun, 7 Nov 2010 09:30:01 UTC Severity: serious Tags: patch, security F ...
libvpx applications could be made to run programs as your login if it opened a specially crafted file ...