CVE-2010-2302 — Use After Free in Google Chrome

CWE-416 — Use After Free3 documents3 sources
Severity
10.0CRITICALNVD
CNA9.3
EPSS
6.1%
top 9.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Google ChromeOpensuseSuse Linux Enterprise Desktop+1 more
Timeline
PublishedJun 15
Latest updateMay 13

Description

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶NVDgoogle/chrome< 5.0.375.70
▶NVDopensuse/opensuse11.2, 11.3+1

🔴Vulnerability Details

2
GHSA
GHSA-93pv-9mrv-96vx: Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5↗2022-05-13
▶
CVEList
CVE-2010-2302: Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5↗2010-06-15
▶
CVE-2010-2302 — Use After Free in Google Chrome | cvebase