CVE-2010-3116

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

• CWE-416

• http://code.google.com/p/chromium/issues/detail?id=50515Permissions Required
• http://code.google.com/p/chromium/issues/detail?id=51835Permissions Required
• http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/41856Third Party Advisory
• http://secunia.com/advisories/42314Third Party Advisory
• http://secunia.com/advisories/43068Third Party Advisory
• http://secunia.com/advisories/43086Third Party Advisory
• http://support.apple.com/kb/HT4455Third Party Advisory
• http://support.apple.com/kb/HT4456Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0177.htmlThird Party Advisory
• http://www.securityfocus.com/bid/44200Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1006-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2722Third Party Advisory
• http://www.vupen.com/english/advisories/2010/3046Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0216Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0552Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11909Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=50515Permissions Required
• http://code.google.com/p/chromium/issues/detail?id=51835Permissions Required
• http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.htmlMailing List, Third Party Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/41856Third Party Advisory
• http://secunia.com/advisories/42314Third Party Advisory
• http://secunia.com/advisories/43068Third Party Advisory
• http://secunia.com/advisories/43086Third Party Advisory
• http://support.apple.com/kb/HT4455Third Party Advisory
• http://support.apple.com/kb/HT4456Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0177.htmlThird Party Advisory
• http://www.securityfocus.com/bid/44200Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1006-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2722Third Party Advisory
• http://www.vupen.com/english/advisories/2010/3046Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0216Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0552Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11909Third Party Advisory

Published

Aug 24, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3110Multiple buffer overflows in the Novell Client novfs module …
• CVE-2010-3111Google Chrome before 6.0.472.53 does not properly mitigate a…
• CVE-2010-3112Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3113Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5…
• CVE-2010-3114The text-editing implementation in Google Chrome before 5.0.…
• CVE-2010-3115Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6…
• CVE-2010-3117Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3118The autosuggest feature in the Omnibox implementation in Goo…
• CVE-2010-3119Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 …
• CVE-2010-3120Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3121Buffer overflow in tm-console-bin in the DevonIT thin-client…
• CVE-2010-3122The DevonIT thin-client management tool relies on a shared s…