CVE-2010-4577
- State
- Published
- Severity
- 7.5 High
- Published
- Dec 22, 2010
- Updated
- Jan 21, 2025
- Reserved
- Dec 21, 2010
Description
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2011-0121vendor-advisory
- http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html
- 42648third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=667025
- ADV-2011-0216vdb-entry
- https://bugs.webkit.org/show_bug.cgi?id=49883
- oval:org.mitre.oval:def:13953vdb-entrysignature
- 43086third-party-advisory
- http://code.google.com/p/chromium/issues/detail?id=63866
- RHSA-2011:0177vendor-advisory
- http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp
- http://trac.webkit.org/changeset/72685
- DSA-2188vendor-advisory
- GLSA-201012-01vendor-advisory
- 45722vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.