Design/Logic Flaw

2010-06-1518:00:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.104 Low

EPSS

Percentile

95.0%

JSON

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.

CPENameOperatorVersion
chromelt5.0.375.70
opensuseeq11.2
opensuseeq11.3
suse_linux_enterprise_desktopeq11 sp1
suse_linux_enterprise_desktopeq10 sp3
suse_linux_enterprise_servereq11 sp1
suse_linux_enterprise_servereq10 sp3

Name	Operator	Version
chrome	lt	5.0.375.70
opensuse	eq	11.2
opensuse	eq	11.3
suse_linux_enterprise_desktop	eq	11 sp1
suse_linux_enterprise_desktop	eq	10 sp3
suse_linux_enterprise_server	eq	11 sp1
suse_linux_enterprise_server	eq	10 sp3