Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2010-0658

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google Chrome是Google发布的开源WEB浏览器。 Skia在Google Chrome中使用时，存在多个整数溢出漏洞，远程攻击者通过包含在CANVAS元素中的向量，执行Chrome沙盒中的任意代码，导致拒绝服务(内存损坏和应用崩溃)。

AI Predicted 9.8 Difficulty: Trivial EPSS 3.31% · P88
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-0658

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Google Skia多个整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Chrome是Google发布的开源WEB浏览器。 Skia在Google Chrome中使用时，存在多个整数溢出漏洞，远程攻击者通过包含在CANVAS元素中的向量，执行Chrome沙盒中的任意代码，导致拒绝服务(内存损坏和应用崩溃)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2010-0658

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-0658

请登录查看更多情报信息。

Vendor Advisories for CVE-2010-0658 (3)

Other References for CVE-2010-0658 (3)

Same Patch Batch · n/a · 2010-02-18 · 25 CVEs total

CVE-2010-0653 Opera download样式表敏感信息泄露漏洞
CVE-2010-0556 Google Chrome样式表重新定向信息泄露漏洞
CVE-2010-0664 Google Chrome程序函数ChildProcessSecurityPolicy::CanRequestURL栈消耗漏洞
CVE-2010-0663 Google Chrome程序内存敏感信息泄露漏洞
CVE-2010-0662 Google Chrome程序 拒绝服务攻击漏洞
CVE-2010-0661 Apple WebKit 'WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp'安全绕过漏洞
CVE-2010-0660 Google Chrome敏感信息泄露漏洞
CVE-2010-0659 Apple WebKit Chrome沙盒任意代码执行漏洞
CVE-2010-0657 Google Chrome桌面快捷方式代码执行和敏感信息泄露漏洞
CVE-2010-0656 Apple WebKit XMLHttpRequest请求响应信息泄露漏洞
CVE-2010-0655 Google Chrome popup窗口 拒绝服务和任意代码执行漏洞
CVE-2010-0654 Mozilla Firefox/Thunderbird/SeaMonkey download样式表敏感信息泄露漏洞
CVE-2010-0416 Realnetworks Helix Player和RealPlayer Unescape多个缓冲区溢出漏洞
CVE-2010-0652 Microsoft Internet Explorer download样式表敏感信息泄露漏洞
CVE-2010-0651 Apple WebKit download样式表敏感信息泄露漏洞
CVE-2010-0650 Google Chrome和Apple Safari WebKit popup窗口安全漏洞
CVE-2010-0649 Google Chrome 'CrossCallParamsEx::CreateFromBuffer'整数溢出漏洞
CVE-2010-0648 Mozilla Firefox 目标URLdocument.styleSheets[0].href特性信息泄露漏洞
CVE-2010-0647 WebKit 代码注入漏洞
CVE-2010-0646 Google Chrome Google V8 'factory.cc'整数错误漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-0658

No comments yet

Leave a comment