Out-of-bounds Read in Google Chrome

CVE-2010-4577

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Vulnerability class: Buffer Overflow

EPSS: 0.022 (80.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Mailing List, Third Party Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Release Notes)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, Broken Link, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (Third Party Advisory, vdb-entry, Broken Link, x_refsource_VUPEN)
  • cve@mitre.org (Permissions Required, x_refsource_MISC)
  • cve@mitre.org (Broken Link, signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, Broken Link, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Exploit, Mailing List, Issue Tracking)
  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory, Broken Link)

Frequently asked questions

What is CVE-2010-4577?
CVE-2010-4577 is a high-severity vulnerability in Google Chrome, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2010-12-22.
How severe is CVE-2010-4577?
High severity. CVSS v3 base score is 7.5 out of 10.