CVE-2010-1773

2010-09-2400:00:00

ubuntu.com

0.016 Low

EPSS

Percentile

87.3%

JSON

Off-by-one error in the toAlphabetic function in
rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used
in Google Chrome before 5.0.375.70, allows remote attackers to obtain
sensitive information, cause a denial of service (memory corruption and
application crash), or possibly execute arbitrary code via vectors related
to list markers for HTML lists, aka rdar problem 8009118.

Notes

Author	Note
jdstrand	qt4-x11 unmaintained upstream (see README.webkit for details) webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit.
mdeslaur	webkitkde is a wrapper around qt4-x11’s webkit.
jdstrand	chromium-browser usually has its own CVEs for its own embedded webkit, but adjust it as needed

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 6.0.472.62~r59676-0ubuntu0.10.04.1UNKNOWN
ubuntu9.10noarchwebkit< 1.2.5-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchwebkit< 1.2.5-0ubuntu0.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	chromium-browser	< 6.0.472.62~r59676-0ubuntu0.10.04.1	UNKNOWN
ubuntu	9.10	noarch	webkit	< 1.2.5-0ubuntu0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	webkit	< 1.2.5-0ubuntu0.10.04.1	UNKNOWN