webkit: memory corruption when handling SVG documents

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

CVE-2010-3113

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

Memory corruption

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

CVE-2010-3113

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

CVE-2010-3113: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...