CVE-2010-0659 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2010-0659

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-18 Feb, 2010 | 18:00

Updated At-11 Apr, 2025 | 00:51

The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

>>webkit>>Versions up to r53524(inclusive)

cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>4.0.244.0

cpe:2.3:a:google:chrome:4.0.244.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=28566	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	cve@mitre.org	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	cve@mitre.org	N/A
http://secunia.com/advisories/43068	cve@mitre.org	N/A
http://securitytracker.com/id?1023506	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://trac.webkit.org/changeset/52833	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0212	cve@mitre.org	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=28566	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1023506	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://trac.webkit.org/changeset/52833	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.webkit.org/show_bug.cgi?id=33231	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079	af854a3a-2127-422b-91ae-364da2661108	N/A