CVE-2010-4199

Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
googlechrome
𝑥
< 7.0.517.44
debiandebian_linux
6.0
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
natty
not-affected
maverick
Fixed 7.0.517.41~r62167-0ubuntu0.10.10.1
released
lucid
Fixed 7.0.517.41~r62167-0ubuntu0.10.04.1
released
karmic
dne
hardy
dne
dapper
dne
webkit
natty
not-affected
maverick
Fixed 1.2.7-0ubuntu0.10.10.1
released
lucid
Fixed 1.2.7-0ubuntu0.10.04.1
released
hardy
ignored
Common Weakness Enumeration
References
http://code.google.com/p/chromium/issues/detail?id=58657
http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
http://secunia.com/advisories/42109
http://www.debian.org/security/2011/dsa-2188
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429
http://code.google.com/p/chromium/issues/detail?id=58657
http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
http://secunia.com/advisories/42109
http://www.debian.org/security/2011/dsa-2188
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429