CVE-2010-4577

HIGH Year: 2010
CVSS v3 Score
7.5
High
CVSS v2 Score
5.0
Medium
Weakness Type
CWE-125
View all →

Vulnerability Description

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Related Vulnerabilities

CVE-2012-4428

HIGH
CVSS:7.5(High)

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

CWE-1252012

CVE-2013-2805

HIGH
CVSS:7.5(High)

Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic...

CWE-1252013

CVE-2014-0160

HIGH
CVSS:7.5(High)

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process m...

CWE-1252014

CVE-2015-7507

HIGH
CVSS:7.5(High)

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.

CWE-1252015

CVE-2015-8921

HIGH
CVSS:7.5(High)

The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.

CWE-1252015

CVE-2015-8948

HIGH
CVSS:7.5(High)

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.

CWE-1252015