CVE-2010-4198

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.

• CWE-20

• http://code.google.com/p/chromium/issues/detail?id=55257Release Notes, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/42109Broken Link
• http://secunia.com/advisories/43086Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0177.htmlNot Applicable
• http://www.securityfocus.com/bid/45719Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0216Not Applicable
• http://www.vupen.com/english/advisories/2011/0552Not Applicable
• https://bugs.webkit.org/show_bug.cgi?id=45611Permissions Required, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=656118Issue Tracking, Patch, Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12157Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=55257Release Notes, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/42109Broken Link
• http://secunia.com/advisories/43086Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:039Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0177.htmlNot Applicable
• http://www.securityfocus.com/bid/45719Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0216Not Applicable
• http://www.vupen.com/english/advisories/2011/0552Not Applicable
• https://bugs.webkit.org/show_bug.cgi?id=45611Permissions Required, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=656118Issue Tracking, Patch, Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12157Third Party Advisory

Published

Nov 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4192Adobe Shockwave Player before 11.5.9.620 allows attackers to…
• CVE-2010-4193Adobe Shockwave Player before 11.5.9.620 does not properly v…
• CVE-2010-4194The dirapi.dll module in Adobe Shockwave Player before 11.5.…
• CVE-2010-4195The TextXtra module in Adobe Shockwave Player before 11.5.9.…
• CVE-2010-4196The Shockwave 3d Asset module in Adobe Shockwave Player befo…
• CVE-2010-4197Use-after-free vulnerability in WebKit, as used in Google Ch…9.8
• CVE-2010-4199Google Chrome before 7.0.517.44 does not properly perform a …8.8
• CVE-2010-4200Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-4201Use-after-free vulnerability in Google Chrome before 7.0.517…9.8
• CVE-2010-4202Multiple integer overflows in Google Chrome before 7.0.517.4…9.8
• CVE-2010-4203WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in…9.8
• CVE-2010-4204WebKit, as used in Google Chrome before 7.0.517.44, webkitgt…9.8