CVE-2010-2297 rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a...
HighCVSS 9.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 5.0.375.70 | 5.0.375.70 |
| opensuse | = 11.2 | No fix listed |
| opensuse | = 11.3 | No fix listed |
| suse linux enterprise desktop | = 10-sp3 | No fix listed |
| suse linux enterprise desktop | = 11-sp1 | No fix listed |
| suse linux enterprise server | = 10-sp3 | No fix listed |
| suse linux enterprise server | = 11-sp1 | No fix listed |
References
- code.google.com vendor-advisory
- googlechromereleases.blogspot.com vendor-advisory
- SUSE-SR:2011:002 mailing-list third-party-advisory vendor-advisory
- 40072 third-party-advisory vendor-advisory
- 43068 third-party-advisory
- ADV-2011-0212 permissions-required vdb-entry
- oval:org.mitre.oval:def:11434 signature third-party-advisory vdb-entry