CVE-2010-4577

moderate-risk
Published 2010-12-22

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Do I need to act?

~
4.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (6)

Chrome Os

Affected Vendors

Fedoraproject Webkitgtk Google Debian

References (30)

Exploit http://code.google.com/p/chromium/issues/detail?id=63866
Release Notes http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13....
Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.ht...
Broken Link http://secunia.com/advisories/42648
Broken Link http://secunia.com/advisories/43086
Mailing List http://trac.webkit.org/changeset/72685
Mailing List http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp
Mailing List http://www.debian.org/security/2011/dsa-2188
Third Party Advisory http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml
Broken Link http://www.redhat.com/support/errata/RHSA-2011-0177.html
Broken Link http://www.securityfocus.com/bid/45722
Broken Link http://www.vupen.com/english/advisories/2011/0216
Permissions Required https://bugs.webkit.org/show_bug.cgi?id=49883
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=667025
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Exploit http://code.google.com/p/chromium/issues/detail?id=63866
Release Notes http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13....
Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.ht...
Broken Link http://secunia.com/advisories/42648
Broken Link http://secunia.com/advisories/43086
and 10 more references
46
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 7/34 · Low
Exposure 13/34 · Low