CVE-2010-4199

Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.

• CWE-20

• http://code.google.com/p/chromium/issues/detail?id=58657Exploit, Issue Tracking, Mailing List, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlRelease Notes, Vendor Advisory
• http://secunia.com/advisories/42109Broken Link
• http://www.debian.org/security/2011/dsa-2188Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=58657Exploit, Issue Tracking, Mailing List, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlRelease Notes, Vendor Advisory
• http://secunia.com/advisories/42109Broken Link
• http://www.debian.org/security/2011/dsa-2188Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429Third Party Advisory

Published

Nov 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4193Adobe Shockwave Player before 11.5.9.620 does not properly v…
• CVE-2010-4194The dirapi.dll module in Adobe Shockwave Player before 11.5.…
• CVE-2010-4195The TextXtra module in Adobe Shockwave Player before 11.5.9.…
• CVE-2010-4196The Shockwave 3d Asset module in Adobe Shockwave Player befo…
• CVE-2010-4197Use-after-free vulnerability in WebKit, as used in Google Ch…9.8
• CVE-2010-4198WebKit, as used in Google Chrome before 7.0.517.44, webkitgt…8.8
• CVE-2010-4200Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-4201Use-after-free vulnerability in Google Chrome before 7.0.517…9.8
• CVE-2010-4202Multiple integer overflows in Google Chrome before 7.0.517.4…9.8
• CVE-2010-4203WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in…9.8
• CVE-2010-4204WebKit, as used in Google Chrome before 7.0.517.44, webkitgt…9.8
• CVE-2010-4205Google Chrome before 7.0.517.44 does not properly handle the…9.8