CVE-2010-4577

7.5 HIGH

Published: December 22, 2010 Modified: April 29, 2026

Description

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=63866

Source: cve@mitre.org

Exploit Issue Tracking Mailing List

http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html

Source: cve@mitre.org

Release Notes

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html

Source: cve@mitre.org

Mailing List Third Party Advisory

http://secunia.com/advisories/42648

Source: cve@mitre.org

Broken Link Third Party Advisory

http://secunia.com/advisories/43086

Source: cve@mitre.org

Broken Link Third Party Advisory

http://trac.webkit.org/changeset/72685

Source: cve@mitre.org

Mailing List Patch

http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp

Source: cve@mitre.org

Mailing List Patch

http://www.debian.org/security/2011/dsa-2188

Source: cve@mitre.org

Mailing List Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0177.html

Source: cve@mitre.org

Broken Link Third Party Advisory

http://www.securityfocus.com/bid/45722

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.vupen.com/english/advisories/2011/0216

Source: cve@mitre.org

Broken Link Third Party Advisory

https://bugs.webkit.org/show_bug.cgi?id=49883

Source: cve@mitre.org

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=667025

Source: cve@mitre.org

Issue Tracking Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953

Source: cve@mitre.org

Broken Link Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=63866