CVE-2010-0658

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause…

published February 18, 2010

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

⚠️ Those pesky integer overflows are back, lurking in Skia! Just a few unexpected inputs could let an attacker execute arbitrary code in Chrome's sandbox! Think of it like a busy restaurant where the chef miscalculates the number of ingredients needed for a dish. Instead of serving a delicious meal, the order gets messed up, leading to chaos in the kitchen — a recipe for disaster! If exploited, this issue could lead to memory corruption and cause the application to crash, like a restaurant suddenly running out of food during peak hours. Your browser could become unreliable, resulting in unsatisfying browsing experiences or worse, giving attackers a foothold into your system.

Put simply

Think of it like a busy restaurant where the chef miscalculates the number of ingredients needed for a dish. Instead of serving a delicious meal, the order gets messed up, leading to chaos in the kitchen — a recipe for disaster! Multiple integer overflows in Skia—utilized by Google Chrome before version 4.0.249.78—can allow remote attackers to execute arbitrary code. These vulnerabilities arise in certain operations involving CANVAS elements, potentially bypassing the sandbox restrictions.

What to do

If exploited, this issue could lead to memory corruption and cause the application to crash, like a restaurant suddenly running out of food during peak hours. Your browser could become unreliable, resulting in unsatisfying browsing experiences or worse, giving attackers a foothold into your system. To protect yourself, ensure you’re using an updated version of Google Chrome (4.0.249.78 or later), as patches should address these vulnerabilities. Regularly check for updates to keep your browser secure and efficient! You've got this! Stay updated and browse safely! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03306 · 88.5th percentile
Published
2010-02-18T17:19Z
EPSS history
Timeline
  • 18 FEB 17:19Z
    Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause…
    cvelistv5