What’s Vulnerable › Vulnerabilities

CVE-2010-4577

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-12-22 · updated 2026-06-16
• Weakness: CWE-125

Description

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

Affected products

• Debian Linux: 6.0, 7.0
• Fedoraproject Fedora: 13
• Google Chrome: before 8.0.552.224 — fixed in 8.0.552.224
• Google ChromeOS: before 8.0.552.343 — fixed in 8.0.552.343
• Webkit: before 1.2.6 — fixed in 1.2.6

How to fix

Upgrade to a fixed version: Google Chrome 8.0.552.224; Google ChromeOS 8.0.552.343; Webkit 1.2.6. Check the vendor advisory for mitigations.

References

• http://code.google.com/p/chromium/issues/detail?id=63866
• http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
• http://secunia.com/advisories/42648
• http://secunia.com/advisories/43086
• http://trac.webkit.org/changeset/72685
• http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp
• http://www.debian.org/security/2011/dsa-2188
• http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml
• http://www.redhat.com/support/errata/RHSA-2011-0177.html
• http://www.securityfocus.com/bid/45722
• http://www.vupen.com/english/advisories/2011/0216

Get alerted when CVE-2010-4577 or the next vulnerability affects your stack