CVE-2010-1773

WebKit: off-by-one memory read out of bounds vulnerability in handling of HTML lists

Published Sep 24, 2010 CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed
Description
Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1793 Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:35 AM
Reserved
May 6, 2010, 12:00 AM
Status
Modified
Published
Sep 24, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:19 PM
Severity
Low
Public date
Jun 7, 2010, 12:00 AM