Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2010-4489

Published: 07/12/2010 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Chrome

Vulnerability Summary

libvpx, as used in Google Chrome prior to 8.0.552.215 and possibly other products, allows remote malicious users to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2010-4489: Integer Overflow in VP8 decoding leads to memory corruption
Debian Bug report logs - #610510 CVE-2010-4489: Integer Overflow in VP8 decoding leads to memory corruption Package: libvpx; Maintainer for libvpx is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Wed, 19 Jan 2011 10:15:01 ...
Ubuntu Security Notice: libvpx vulnerability
libvpx DOS bad read ...

References

CWE-119http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.htmlhttp://secunia.com/advisories/43728http://www.ubuntu.com/usn/USN-1087-1http://www.vupen.com/english/advisories/2011/0662http://code.google.com/p/chromium/issues/detail?id=61653http://secunia.com/advisories/42472https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11919https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610510https://usn.ubuntu.com/1087-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook