Description
Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.
References (20)
Scores
CVSS v3
8.8
EPSS
0.0235
EPSS Percentile
84.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-193
Status
published
Products (9)
canonical/ubuntu_linux
9.10
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
10.10
fedoraproject/fedora
12
fedoraproject/fedora
13
google/chrome
< 5.0.375.70
opensuse/opensuse
11.2
opensuse/opensuse
11.3
redhat/enterprise_linux
6.0
Published
Sep 24, 2010
Tracked Since
Feb 18, 2026