CVE-2010-2302

2010-06-1518:00:02

CWE-416

mitre

web.nvd.nist.gov

cve-2010-2302

vulnerability

webcore

webkit

google chrome

remote attack

denial of service

memory corruption

arbitrary code

remote fonts

shadow dom trees

rdar problem 8007953

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.104

Percentile

95.0%

JSON

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.

Affected configurations

Nvd

Node

googlechromeRange<5.0.375.70

Node

opensuseopensuseMatch11.2

opensuseopensuseMatch11.3

susesuse_linux_enterprise_desktopMatch10sp3

susesuse_linux_enterprise_desktopMatch11sp1

susesuse_linux_enterprise_serverMatch10sp3

susesuse_linux_enterprise_serverMatch11sp1

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
opensuseopensuse11.2cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
opensuseopensuse11.3cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
susesuse_linux_enterprise_desktop10cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*
susesuse_linux_enterprise_desktop11cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
susesuse_linux_enterprise_server10cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*
susesuse_linux_enterprise_server11cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
opensuse	opensuse	11.2	cpe:2.3:o:opensuse:opensuse:11.2:::::::*
opensuse	opensuse	11.3	cpe:2.3:o:opensuse:opensuse:11.3:::::::*
suse	suse_linux_enterprise_desktop	10	cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3::::::
suse	suse_linux_enterprise_desktop	11	cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1::::::
suse	suse_linux_enterprise_server	10	cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3::::::
suse	suse_linux_enterprise_server	11	cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1::::::