Deserialization in Google Chrome

CVE-2010-3258

The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.

Vulnerability class: Insecure Deserialization

EPSS: 0.009 (56.6th percentile) — read the EPSS interpretation.

Affected products

Google Chrome
N/a — versions n/a

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Issue Tracking, Vendor Advisory)
cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)