CVE-2010-2302 Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vec...
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 5.0.375.70 | 5.0.375.70 |
| opensuse | = 11.2 | No fix listed |
| opensuse | = 11.3 | No fix listed |
| suse linux enterprise desktop | = 10-sp3 | No fix listed |
| suse linux enterprise desktop | = 11-sp1 | No fix listed |
| suse linux enterprise server | = 10-sp3 | No fix listed |
| suse linux enterprise server | = 11-sp1 | No fix listed |
References
- code.google.com vendor-advisory
- googlechromereleases.blogspot.com vendor-advisory
- SUSE-SR:2011:002 mailing-list third-party-advisory vendor-advisory
- 40072 third-party-advisory
- 43068 third-party-advisory
- ADV-2011-0212 permissions-required vdb-entry
- oval:org.mitre.oval:def:11948 signature third-party-advisory vdb-entry