PT-2010-5351 · Google+2 · Google Chrome+2

Timothy B. Terriberry · Published 2010-11-05 · Updated 2020-07-31 · CVE-2010-4203

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebM libvpx versions prior to 0.9.5 Google Chrome versions prior to 7.0.517.44

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via invalid frames, resulting in memory corruption.

Recommendations For WebM libvpx versions prior to 0.9.5, update to version 0.9.5 or later to resolve the issue. For Google Chrome versions prior to 7.0.517.44, update to version 7.0.517.44 or later to resolve the issue.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2010-4203

RHSA-2010:0999

RHSA-2010_0999

Affected Products

Google Chrome

Red Hat

Libvpx

References · 19

• 🔥 http://code.google.com/p/chromium/issues/detail?id=60055 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4203 · Security Note
• http://security.gentoo.org/glsa/glsa-201101-03.xml · Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html · Vendor Advisory
• http://secunia.com/advisories/42109 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-4203 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4203 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2010-0999.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4203 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0999.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0115 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12198 · Note
• http://secunia.com/advisories/42908 · Note
• http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53 · Note
• https://access.redhat.com/errata/RHSA-2010:0999 · Note