CVE

Id
43243  
CVE No.
CVE-2010-0659  
Status
Candidate  
Description
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.  
Phase
Assigned (20100218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471200 43243 CVE-2010-0659 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=28566  View
471201 43243 CVE-2010-0659 CONFIRM:http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html  View
471202 43243 CVE-2010-0659 CONFIRM:http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
471203 43243 CVE-2010-0659 CONFIRM:http://trac.webkit.org/changeset/52833  View
471204 43243 CVE-2010-0659 CONFIRM:https://bugs.webkit.org/show_bug.cgi?id=33231  View
471205 43243 CVE-2010-0659 SUSE:SUSE-SR:2011:002  View
471206 43243 CVE-2010-0659 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
471207 43243 CVE-2010-0659 OVAL:oval:org.mitre.oval:def:14079  View
471208 43243 CVE-2010-0659 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14079  View
471209 43243 CVE-2010-0659 SECTRACK:1023506  View
471210 43243 CVE-2010-0659 URL:http://securitytracker.com/id?1023506  View
471211 43243 CVE-2010-0659 SECUNIA:43068  View
471212 43243 CVE-2010-0659 URL:http://secunia.com/advisories/43068  View
471213 43243 CVE-2010-0659 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36612 JVNDB-2010-002392 Google Chrome の ParamTraits::Read 関数における重要な情報を取得される脆弱性 Google Chrome の common/common_param_traits.cc 内にある ParamTraits::Read 関数は、bitmap データを保持するメモリロケーションを初期化しないため、プロセスメモリからの重要な情報を取得される脆弱性が存在します。 CVE-2010-0663 43243 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002392.html  View