Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2010-4577

Published: 22/12/2010 Updated: 02/02/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Webkitgtk

Vulnerability Summary

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome prior to 8.0.552.224, Chrome OS prior to 8.0.552.343, webkitgtk prior to 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote malicious users to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webkitgtk webkitgtk

google chrome os

google chrome

fedoraproject fedora 13

debian debian linux 7.0

debian debian linux 6.0

Vendor Advisories

Ubuntu Security Notice: webkit vulnerabilities
Multiple security vulnerabilities were fixed in WebKit ...
Debian Security Advisories: DSA-2188-1 webkit -- several vulnerabilities
Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+ The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of servic ...

Exploits

Exploit DB: Konqueror 4.7.3 Memory Corruption
Konqueror version 473 suffers from a number of memory corruption vulnerabilities ...

References

CWE-125CWE-843http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.htmlhttp://code.google.com/p/chromium/issues/detail?id=63866http://www.gentoo.org/security/en/glsa/glsa-201012-01.xmlhttp://secunia.com/advisories/42648http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpphttp://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlhttp://trac.webkit.org/changeset/72685https://bugs.webkit.org/show_bug.cgi?id=49883https://bugzilla.redhat.com/show_bug.cgi?id=667025http://www.securityfocus.com/bid/45722http://www.redhat.com/support/errata/RHSA-2011-0177.htmlhttp://secunia.com/advisories/43086http://www.vupen.com/english/advisories/2011/0216http://www.debian.org/security/2011/dsa-2188https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953https://usn.ubuntu.com/1195-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook