CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption)…

published June 15, 2010

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

⚠️ A crafty combination of remote fonts and shadow DOM trees sets the stage for a “use-after-free” disaster in WebKit! Think of this vulnerability like a restaurant that serves a dish with a special ingredient, but mistakenly uses the wrong one from the trash—it could lead to a total meltdown in the kitchen! If exploited, this could cause a denial of service, leading to application crashes or unexpected behavior. In a worst-case scenario, an attacker could even execute arbitrary code, turning your browser into a playground for mischief!

Put simply

Think of this vulnerability like a restaurant that serves a dish with a special ingredient, but mistakenly uses the wrong one from the trash—it could lead to a total meltdown in the kitchen! This use-after-free vulnerability in WebCore allows memory corruption when handling remote fonts with shadow DOM trees, potentially leading to crashes or code execution.

What to do

If exploited, this could cause a denial of service, leading to application crashes or unexpected behavior. In a worst-case scenario, an attacker could even execute arbitrary code, turning your browser into a playground for mischief! To mitigate this risk, ensure you're running Google Chrome version 5.0.375.70 or later. Regularly check for updates to stay protected against such vulnerabilities. Consider enabling security features to limit the impact of potential exploits. You've got this! Keep your browser updated, and you'll stay protected from these sneaky vulnerabilities! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02981 · 87.1th percentile
Published
2010-06-15T17:48Z
EPSS history
Timeline
  • 15 JUN 17:48Z
    Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption)…
    cvelistv5