ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://trac.webkit.org/changeset/52833

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Resource:

x_refsource_CONFIRM

Hyperlink: http://securitytracker.com/id?1023506

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Resource:

vdb-entry

signature

x_refsource_OVAL

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
http://trac.webkit.org/changeset/52833	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
https://bugs.webkit.org/show_bug.cgi?id=33231	x_refsource_CONFIRM x_transferred
http://securitytracker.com/id?1023506	vdb-entry x_refsource_SECTRACK x_transferred
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	x_refsource_CONFIRM x_transferred
http://code.google.com/p/chromium/issues/detail?id=28566	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	vdb-entry signature x_refsource_OVAL x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Resource:

x_refsource_CONFIRM

x_transferred

cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://trac.webkit.org/changeset/52833

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://securitytracker.com/id?1023506

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:18 Feb, 2010 | 18:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Apple Inc.

>>webkit>>Versions up to r53524(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

cpe:2.3:a:google:chrome:4.0.244.0:*:*:*:*:*:*:*

>>chrome>>4.0.244.0

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=28566	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	cve@mitre.org	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	cve@mitre.org	N/A
http://secunia.com/advisories/43068	cve@mitre.org	N/A
http://securitytracker.com/id?1023506	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://trac.webkit.org/changeset/52833	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0212	cve@mitre.org	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=28566	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1023506	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://trac.webkit.org/changeset/52833	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023506

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://trac.webkit.org/changeset/52833

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=28566

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023506

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://trac.webkit.org/changeset/52833

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=33231

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2640Records found

CVE-2014-9945

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.11%

7 Day CHG~0.00%

Published-06 Jun, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-285

Improper Authorization

CVE-2010-3802

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.00% / 91.73%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2010-4379

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 78.93%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3817

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.22% / 83.83%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-4376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.55%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-22579

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.30% / 52.83%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:14

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos mac_os_x macos tvOS macOS iOS and iPadOS

CVE-2010-3805

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.02% / 93.52%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-4384

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.95% / 82.71%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-3801

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.00% / 91.73%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3809

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.35% / 84.26%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-4091

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.24% / 96.32%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4035

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.81% / 85.57%

7 Day CHG~0.00%

Published-21 Oct, 2010 | 18:12

Updated-11 Apr, 2025 | 00:51

Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-4387

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.65% / 85.17%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-22615

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.28% / 51.32%

7 Day CHG+0.03%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

CVE-2010-4397

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.62% / 85.11%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2010-3812

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.68% / 90.85%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2022-22593

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.31% / 78.95%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:14

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2010-4375

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.55%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4377

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.19%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4381

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.23% / 78.31%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.

Product-realplayer_sp realplayer mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3816

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-10.43% / 92.92%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2022-23205

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-06 May, 2022 | 17:02

Updated-23 Apr, 2025 | 18:29

Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows photoshop macos Photoshop

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4383

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 78.93%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted RA5 file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3823

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-10.43% / 92.92%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3249

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.02% / 76.34%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "stale pointer" issue.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-3412

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.22% / 44.77%

7 Day CHG~0.00%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2010-3255

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.13% / 77.41%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-webkitgtk n/a Google LLC

Product-chrome webkitgtk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3654

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Macromedia, Inc.Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-93.57% / 99.83%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Product-linux_kernel windows acrobat_reader solaris acrobat flash_player android mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-22640

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.47% / 63.48%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3642

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3636

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.26% / 83.96%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3647

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3257

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-12.15% / 93.56%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Vendor-webkitgtk n/a Apple Inc.Canonical Ltd.Google LLC

Product-ubuntu_linux iphone_os safari chrome webkitgtk n/a

CWE ID-CWE-416

Use After Free

CVE-2020-24433

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-05 Nov, 2020 | 19:32

Updated-16 Sep, 2024 | 21:57

Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component

Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary code as SYSTEM. Exploitation of this issue requires an attacker to socially engineer a victim, or the attacker must already have some access to the environment.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-284

Improper Access Control

CVE-2022-22634

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.35%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados tvos tvOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22636

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.85%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados tvos tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2770

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.94% / 87.86%

7 Day CHG~0.00%

Published-09 Sep, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted font in a data: URL.

Vendor-n/a Mozilla Corporation Apple Inc.

Product-thunderbird firefox mac_os_x seamonkey n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3641

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3640

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-2997

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.73% / 87.52%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2010-3190

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-50.11% / 97.74%

7 Day CHG~0.00%

Published-31 Aug, 2010 | 19:25

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."

Product-visual_c\+\+visual_studio_.net itunes visual_studio n/a

CWE ID-CWE-426

Untrusted Search Path

CVE-2010-2883

Matching Score-8

Matching Score-8

CVSS Score-7.3||HIGH

EPSS-93.25% / 99.80%

7 Day CHG~0.00%

Published-09 Sep, 2010 | 21:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-windows acrobat_reader acrobat macos n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3258

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.18% / 39.80%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2022-22633

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.35% / 56.64%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos watchOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2999

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.47% / 84.65%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed MLLT atom in an AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2010-2884

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-39.68% / 97.21%

7 Day CHG~0.00%

Published-15 Sep, 2010 | 17:26

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.

Vendor-n/a Microsoft Corporation Google LLC Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat flash_player android mac_os_x n/a

CVE-2010-3643

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3639

Matching Score-8

Matching Score-8