NVD

Id
15826  
Name
CVE-2010-4577  
Description
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-12-21  
Modified Date
2014-10-28  
Seq
2010-4577  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89751 15826 CVE-2010-4577 http://code.google.com/p/chromium/issues/detail?id=63866  View
89752 15826 CVE-2010-4577 http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html  View
89753 15826 CVE-2010-4577 FEDORA-2011-0121  View
89754 15826 CVE-2010-4577 oval:org.mitre.oval:def:13953  View
89755 15826 CVE-2010-4577 http://trac.webkit.org/changeset/72685  View
89756 15826 CVE-2010-4577 http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp  View
89757 15826 CVE-2010-4577 DSA-2188  View
89758 15826 CVE-2010-4577 GLSA-201012-01  View
89759 15826 CVE-2010-4577 RHSA-2011:0177  View
89760 15826 CVE-2010-4577 45722  View
89761 15826 CVE-2010-4577 ADV-2011-0216  View
89762 15826 CVE-2010-4577 https://bugs.webkit.org/show_bug.cgi?id=49883  View
89763 15826 CVE-2010-4577 https://bugzilla.redhat.com/show_bug.cgi?id=667025  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36980 JVNDB-2010-002760 WebKit の CSSParser::parseFontFaceSrc 関数におけるサービス運用妨害 (DoS) の脆弱性 WebKit の WebCore/css/CSSParser.cpp 内にある CSSParser::parseFontFaceSrc 関数は、Cascading Style Sheets (CSS) のトークンシーケンスを適切に構文解析しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4577 47157 CVE-2010-4577 15826 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002760.html 2010-12-13 2011-02-22 View