CVE-2010-1823

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.

Affected products

Google Chrome, Safari, Webkit, Itunes

Google Chrome

< 6.0.472.59

CVSS 2.0

9.3 HIGH

EPSS

3.3% (87th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2010-09-24