Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4577
HistoryDec 21, 2010 - 12:00 a.m.

CVE-2010-4577

2010-12-2100:00:00
ubuntu.com
ubuntu.com
10

0.008 Low

EPSS

Percentile

81.0%

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in
WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before
8.0.552.343, webkitgtk before 1.2.6, and other products does not properly
parse Cascading Style Sheets (CSS) token sequences, which allows remote
attackers to cause a denial of service (out-of-bounds read) via a crafted
local font, related to “Type Confusion.”

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 8.0.552.224~r68599-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchchromium-browser< 8.0.552.224~r68599-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchchromium-browser< 8.0.552.224~r68599-0ubuntu1UNKNOWN
ubuntu10.04noarchwebkit< 1.2.7-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchwebkit< 1.2.7-0ubuntu0.10.10.1UNKNOWN