PT-2010-3886 · Google+1 · Google Chrome+1

Published 2010-06-15 · Updated 2020-08-05 · CVE-2010-2300

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 5.0.375.70

Description A use-after-free issue in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This issue is related to handlers for DOM mutation events.

Recommendations For versions prior to 5.0.375.70, update to version 5.0.375.70 or later to resolve the issue. As a temporary workaround, consider restricting access to DOM mutation event handlers until a patch is available.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2010-2300

Affected Products

Google Chrome

Webkit

References · 9

• 🔥 https://exploit-db.com/exploits/18446 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2300 · Security Note
• http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=43315 · Note
• http://secunia.com/advisories/40072 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11357 · Note
• http://secunia.com/advisories/43068 · Note
• http://vupen.com/english/advisories/2011/0212 · Note