Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-4577

Опубликовано: 22 дек. 2010
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 8.0.552.224 (исключая)
cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
Версия до 1.2.6 (исключая)
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
Версия до 8.0.552.343 (исключая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04266
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2010-4577

CVSS3: 7.5
ubuntu
больше 14 лет назад

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

redhat логотип

CVE-2010-4577

redhat
больше 14 лет назад

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

debian логотип

CVE-2010-4577

CVSS3: 7.5
debian
больше 14 лет назад

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp ...

github логотип

GHSA-9j34-5qgm-c4jh

CVSS3: 7.5
github
около 3 лет назад

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

oracle-oval логотип

ELSA-2011-0177

oracle-oval
больше 14 лет назад

ELSA-2011-0177: webkitgtk security update (MODERATE)

EPSS

Процентиль: 88%
0.04266
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125
CWE-125