CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or…

published February 18, 2010

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

⚠️ This Google Chrome vulnerability is a sneaky little bug that can crash the browser when a popup gets blocked! 💥 Think of it like a restaurant where a customer tries to order dessert, but the waiter goes to another table — if they’re not careful, the dessert order gets lost altogether, leading to confusion and upset guests! An attacker could potentially exploit this vulnerability to crash your browser, leading to a frustrating denial of service. In the worst-case scenario, it could even allow remote code execution, giving them access to your system — a real party crasher!

Put simply

Think of it like a restaurant where a customer tries to order dessert, but the waiter goes to another table — if they’re not careful, the dessert order gets lost altogether, leading to confusion and upset guests! This use-after-free vulnerability occurs when the browser mishandles memory related to blocked popups during site navigation, which could be exploited by attackers to execute arbitrary code or cause crashes.

What to do

An attacker could potentially exploit this vulnerability to crash your browser, leading to a frustrating denial of service. In the worst-case scenario, it could even allow remote code execution, giving them access to your system — a real party crasher! Update your Google Chrome to version 4.0.249.78 or later to patch this vulnerability and keep your browsing experience smooth. Regularly check for updates and enable automatic updates to ensure you're protected! You've got this! Stay vigilant and keep your browser updated to ensure a safe experience online. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07458 · 94.4th percentile
Published
2010-02-18T17:19Z
EPSS history
Timeline
  • 18 FEB 17:19Z
    Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or…
    cvelistv5