Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-1773

Опубликовано: 07 июн. 2010
Источник: redhat
CVSS2: 2.6
EPSS Низкий

Описание

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6qtWill not fix
Red Hat Enterprise Linux 6webkitgtkWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-193->CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=596500WebKit: off-by-one memory read out of bounds vulnerability in handling of HTML lists

EPSS

Процентиль: 82%
0.01781
Низкий

2.6 Low

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 15 лет назад

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

CVSS3: 8.8
nvd
больше 15 лет назад

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

CVSS3: 8.8
debian
больше 15 лет назад

Off-by-one error in the toAlphabetic function in rendering/RenderListM ...

CVSS3: 8.8
github
больше 3 лет назад

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

EPSS

Процентиль: 82%
0.01781
Низкий

2.6 Low

CVSS2