PT-2010-3453 · Google+1 · Google Chrome+3

Chasen Le Hara · Publicado 2010-09-24 · Atualizado 2020-07-31 · CVE-2010-1823

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebKit versions before r65958 Google Chrome versions before 6.0.472.59

Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors that trigger the use of document APIs, such as document.close(), during parsing. This can be demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font.

Recommendations For WebKit versions before r65958, update to version r65958 or later. For Google Chrome versions before 6.0.472.59, update to version 6.0.472.59 or later.

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2010-1823

Produtos afetados

Google Chrome

Safari

Webkit

Itunes

Referências · 13

• https://bugs.webkit.org/show_bug.cgi?id=44533 · Correção
• http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1823 · Nota de Segurança
• http://support.apple.com/kb/HT4808 · Nota
• http://secunia.com/advisories/43068 · Nota
• http://code.google.com/p/chromium/issues/detail?id=50250 · Aviso do Fabricante
• http://support.apple.com/kb/HT4981 · Nota
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html · Aviso do Fabricante
• http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7405 · Nota
• https://bugs.webkit.org/show_bug.cgi?id=43055 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0212 · Nota