CVE-2010-1773

HIGH

Google Chrome < 5.0.375.70 - Off-by-one Error in RenderListMarker

Title source: llm
STIX 2.1

Description

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

References (20)

Core 20
Core References
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2722
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43068
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1801
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=596500
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1006-1
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41856
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0212
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40072
Permissions Required, Vendor Advisory x_refsource_confirm
https://bugs.webkit.org/show_bug.cgi?id=39508
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40557
Mailing List, Vendor Advisory x_refsource_confirm
http://code.google.com/p/chromium/issues/detail?id=44955
Mailing List, Patch, Vendor Advisory x_refsource_confirm
http://trac.webkit.org/changeset/59950
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41575
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0552
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html

Scores

CVSS v3 8.8
EPSS 0.0215
EPSS Percentile 79.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-193
Status published
Products (9)
canonical/ubuntu_linux 9.10
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 10.10
fedoraproject/fedora 12
fedoraproject/fedora 13
google/chrome < 5.0.375.70
opensuse/opensuse 11.2
opensuse/opensuse 11.3
redhat/enterprise_linux 6.0
Published Sep 24, 2010
Tracked Since Feb 18, 2026