PT-2010-3885 · Google · Google Chrome

Publicado 2010-06-15 · Atualizado 2020-08-05 · CVE-2010-2299

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 5.0.375.70

Description The issue is related to a "Type Confusion" problem in the Clipboard::DispatchObject function, which does not properly handle CBF SMBITMAP objects in a ViewHostMsg ClipboardWriteObjectsAsync message. This might allow remote attackers to execute arbitrary code via crafted data from the renderer process.

Recommendations For versions prior to 5.0.375.70, update to version 5.0.375.70 or later to resolve the issue.

Correção

Type Confusion

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

CVE-2010-2299

Produtos afetados

Google Chrome

Referências · 5

• http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html · Aviso do Fabricante
• http://code.google.com/p/chromium/issues/detail?id=43307 · Aviso do Fabricante
• http://secunia.com/advisories/40072 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12099 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2299 · Nota de Segurança