PT-2010-5351 · Google+2 · Google Chrome+2

Timothy B. Terriberry · Publicado 2010-11-05 · Atualizado 2020-07-31 · CVE-2010-4203

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebM libvpx versions prior to 0.9.5 Google Chrome versions prior to 7.0.517.44

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via invalid frames, resulting in memory corruption.

Recommendations For WebM libvpx versions prior to 0.9.5, update to version 0.9.5 or later to resolve the issue. For Google Chrome versions prior to 7.0.517.44, update to version 7.0.517.44 or later to resolve the issue.

Exploit

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2010-4203

RHSA-2010:0999

RHSA-2010_0999

Produtos afetados

Google Chrome

Red Hat

Libvpx

Referências · 19

• 🔥 http://code.google.com/p/chromium/issues/detail?id=60055 · Exploit
• http://vupen.com/english/advisories/2011/0115 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4203 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201101-03.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12198 · Nota
• http://secunia.com/advisories/42908 · Nota
• http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53 · Nota
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html · Aviso do Fabricante
• http://secunia.com/advisories/42109 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2010:0999 · Nota
• http://secunia.com/advisories/42690 · Nota
• http://secunia.com/advisories/42118 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4203 · Aviso do Fabricante
• http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG · Nota
• https://access.redhat.com/security/cve/CVE-2010-4203 · Nota