CVE-2010-4490

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via…

published December 7, 2010

CVSS
—
EPSS
1%
Percentile
70.9
In the wild
Unconfirmed
What it is

🚨 A little malformed video can crash Google Chrome! Before version 8.0.552.215, this bug lets attackers cause a denial of service that might leave users reeling. ⚠️ Think of it like a waiter who serves a dish that looks delicious but is actually filled with spoilt ingredients. One bad video file and the entire feast (or browser) goes belly-up! If exploited, users could experience sudden application crashes, disrupting their browsing experience and leaving them vulnerable to further attacks. While the severity is classified as unknown, the potential for chaos is definitely there!

Put simply

Think of it like a waiter who serves a dish that looks delicious but is actually filled with spoilt ingredients. One bad video file and the entire feast (or browser) goes belly-up! This vulnerability arises from an indexing error triggered by malformed video content, allowing attackers to initiate a denial of service in Google Chrome.

What to do

If exploited, users could experience sudden application crashes, disrupting their browsing experience and leaving them vulnerable to further attacks. While the severity is classified as unknown, the potential for chaos is definitely there! To safeguard your users, make sure to update Google Chrome to version 8.0.552.215 or later. Regularly check for updates and avoid opening untrusted video files to minimize risk. You've got this! Keep your browser updated, and you'll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01338 · 70.9th percentile
Published
2010-12-07T20:00Z
EPSS history
Timeline
  • 07 DEC 20:00Z
    Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via…
    cvelistv5