CVE-2010-4577: CVE-2010-4577

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-4577

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Google Chrome CSS越界读取漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。在Google Chrome 8.0.552.224之前版本，Chrome OS 8.0.552.343之前版本，以及webkitgtk 1.2.6之前版本中使用的WebKit中的WebCore/css/CSSParser.cpp的CSSParser::parseFontFaceSrc函数没有正确解析层叠样式表(CSS)令牌序列。远程攻击者可借助未明向量导致拒绝服务(越界读取)。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2010-4577

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2010-4577

Please Login to view more intelligence information

http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.htmlx_refsource_CONFIRM
http://trac.webkit.org/changeset/72685x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=667025x_refsource_CONFIRM
http://code.google.com/p/chromium/issues/detail?id=63866x_refsource_CONFIRM
https://bugs.webkit.org/show_bug.cgi?id=49883x_refsource_MISC
http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cppx_refsource_MISC
http://www.securityfocus.com/bid/45722vdb-entryx_refsource_BID
http://secunia.com/advisories/42648third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/43086third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2011/dsa-2188vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2011/0216vdb-entryx_refsource_VUPEN
http://www.gentoo.org/security/en/glsa/glsa-201012-01.xmlvendor-advisoryx_refsource_GENTOO
http://www.redhat.com/support/errata/RHSA-2011-0177.htmlvendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlvendor-advisoryx_refsource_FEDORA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953vdb-entrysignaturex_refsource_OVAL
https://nvd.nist.gov/vuln/detail/CVE-2010-4577

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2010-4577

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2010-4577

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2010-4577

III. Intelligence Information for CVE-2010-4577

IV. Related Vulnerabilities

V. Comments for CVE-2010-4577

Leave a comment