CVE-2010-1772

WebKit: use-after-free vulnerability in handling of geolocation events

Published Sep 24, 2010 CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Description
Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01798}

epss

{'score': 0.01993}

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:35 AM
Reserved
May 6, 2010, 12:00 AM
Status
Modified
Published
Sep 24, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:19 PM
Severity
Critical
Public date
Jun 7, 2010, 12:00 AM