CVE-2010-1029

qt: Stack consumption via specially-crafted CSS STYLE element

Published Mar 19, 2010 CVSS 2.0 · 5.0 Medium EPSS 11.7% KEV · Not listed
Description
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 1:06 AM
Reserved
Mar 19, 2010, 12:00 AM
Status
Modified
Published
Mar 19, 2010, 9:30 PM
Modified
Jun 16, 2026, 11:17 PM
Severity
Low
Public date
Feb 24, 2010, 12:00 AM