Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2120
HistoryJun 01, 2010 - 12:00 a.m.

CVE-2010-2120

2010-06-0100:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.003

Percentile

68.0%

Google Chrome 1.0.154.48 allows remote attackers to cause a denial of
service (resource consumption) via JavaScript code containing an infinite
loop that creates IFRAME elements for invalid news:// URIs.

Notes

Author Note
jdstrand ignoring until upstream fixes this since a malicious website can achieve the same ‘exploit’ via other means

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.003

Percentile

68.0%

Related for UB:CVE-2010-2120