CVE-2010-2297

rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash)…

published June 15, 2010

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

⚠️ A rogue table with an oversized colspan could lead to some serious chaos! This vulnerability in Google Chrome before version 5.0.375.70 allows attackers to trigger a crash or even execute arbitrary code. 🔥 Think of a restaurant where one overly long table takes up the entire dining area, blocking the way for waitstaff and diners alike. If that table collapses, it could cause a major disruption, much like how this HTML vulnerability can cause a crash in the application. An attacker could craft an HTML document that exploits this flaw, leading to a denial of service that locks users out of the browser. While it’s unclear if arbitrary code execution is feasible, the potential for an application crash is definitely a bummer!

Put simply

Think of a restaurant where one overly long table takes up the entire dining area, blocking the way for waitstaff and diners alike. If that table collapses, it could cause a major disruption, much like how this HTML vulnerability can cause a crash in the application. This vulnerability exists in the rendering component of WebKit, where a large colspan attribute in a table can cause the application to crash due to improper handling of table layout in the browser.

What to do

An attacker could craft an HTML document that exploits this flaw, leading to a denial of service that locks users out of the browser. While it’s unclear if arbitrary code execution is feasible, the potential for an application crash is definitely a bummer! Upgrade Google Chrome to version 5.0.375.70 or later to eliminate this vulnerability. Ensure your browser is always up-to-date to stay ahead of potential exploits! You've got this! Stay vigilant, keep your software updated, and you'll keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02811 · 86.3th percentile
Published
2010-06-15T17:48Z
EPSS history
Timeline
  • 15 JUN 17:48Z
    rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash)…
    cvelistv5