CVE-2010-1233

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=35724Exploit, Permissions Required
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlBroken Link
http://secunia.com/advisories/43068Broken Link
http://www.vupen.com/english/advisories/2011/0212Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14023Broken Link
http://code.google.com/p/chromium/issues/detail?id=35724Exploit, Permissions Required
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlBroken Link
http://secunia.com/advisories/43068Broken Link
http://www.vupen.com/english/advisories/2011/0212Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14023Broken Link

Timeline

Published: Apr 1, 2010
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2010

CVE-2010-12347.5Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentic CVE-2010-12354.3Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog CVE-2010-12364.3The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Floc CVE-2010-12377.5Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified CVE-2010-12385.0MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer field CVE-2010-12399.3Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequ CVE-2010-12409.3Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in t CVE-2010-12419.3Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Window CVE-2010-12424.3Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote att CVE-2010-12437.5The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecifie CVE-2010-12446.8Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijac CVE-2010-12459.3Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter f