CVE-2010-4041 The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspe...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 7.0.517.41 | 7.0.517.41 |
References
- code.google.com issue-tracking mailing-list patch vendor-advisory
- googlechromereleases.blogspot.com release-notes vendor-advisory
- 41888 broken-link third-party-advisory
- 44241 third-party-advisory vdb-entry
- ADV-2010-2731 not-applicable vdb-entry
- oval:org.mitre.oval:def:14201 signature third-party-advisory vdb-entry