PT-2010-2411 · Google+1 · Google Chrome+1

Publicado 2010-02-18 · Atualizado 2017-09-19 · CVE-2010-0659

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebKit versions before r52833 Google Chrome versions before 4.0.249.78

Description The issue arises from the image decoder in WebKit not properly handling a failure of memory allocation. This can be exploited by remote attackers using a malformed GIF file that specifies a large size, allowing them to execute arbitrary code within the Chrome sandbox.

Recommendations For WebKit versions before r52833, update to version r52833 or later. For Google Chrome versions before 4.0.249.78, update to version 4.0.249.78 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0659

Produtos afetados

Google Chrome

Webkit

Referências · 11

• https://bugs.webkit.org/show_bug.cgi?id=33231 · Nota
• http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html · Correção
• http://vupen.com/english/advisories/2011/0212 · Nota
• http://securitytracker.com/id?1023506 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0659 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Aviso do Fabricante
• http://trac.webkit.org/changeset/52833 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079 · Nota
• http://secunia.com/advisories/43068 · Nota
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs · Aviso do Fabricante
• http://code.google.com/p/chromium/issues/detail?id=28566 · Nota