CVE-2010-0662

UnknownEPSS 0.98%

Last modified

CVE-2010-0662 is a vulnerability of currently unknown severity. The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.. EPSS estimates a 0.98% chance of exploitation in the next 30 days.

Description

The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.

Metrics

EPSS Probability
0.98%

57.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
GoogleChrome<= 4.0.249.0
GoogleChrome0.2.149.27
GoogleChrome0.2.149.29
GoogleChrome0.2.149.30
GoogleChrome0.2.152.1
GoogleChrome0.2.153.1
GoogleChrome0.3.154.0
GoogleChrome0.3.154.3
GoogleChrome0.4.154.18
GoogleChrome0.4.154.22
GoogleChrome0.4.154.31
GoogleChrome0.4.154.33
GoogleChrome1.0.154.36
GoogleChrome1.0.154.39
GoogleChrome1.0.154.42
GoogleChrome1.0.154.43
GoogleChrome1.0.154.46
GoogleChrome1.0.154.48
GoogleChrome1.0.154.52
GoogleChrome1.0.154.53
GoogleChrome1.0.154.59
GoogleChrome1.0.154.65
GoogleChrome2.0.156.1
GoogleChrome2.0.157.0
GoogleChrome2.0.157.2
GoogleChrome2.0.158.0
GoogleChrome2.0.159.0
GoogleChrome2.0.169.0
GoogleChrome2.0.169.1
GoogleChrome2.0.170.0
GoogleChrome2.0.172
GoogleChrome2.0.172.2
GoogleChrome2.0.172.8
GoogleChrome2.0.172.27
GoogleChrome2.0.172.28
GoogleChrome2.0.172.30
GoogleChrome2.0.172.31
GoogleChrome2.0.172.33
GoogleChrome2.0.172.37
GoogleChrome2.0.172.38
GoogleChrome3.0.182.2
GoogleChrome3.0.190.2
GoogleChrome3.0.193.2Beta
GoogleChrome3.0.195.21
GoogleChrome3.0.195.24
GoogleChrome3.0.195.32
GoogleChrome3.0.195.33

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-0662?
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.
How severe is CVE-2010-0662?
Severity scoring for CVE-2010-0662 is pending analysis. The EPSS model estimates a 0.98% probability of exploitation in the next 30 days.
How do I fix CVE-2010-0662?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-0662?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST