CVE-2010-4041

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=54794Issue Tracking, Mailing List, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.htmlRelease Notes, Vendor Advisory
http://secunia.com/advisories/41888Broken Link
http://www.securityfocus.com/bid/44241Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/2731Not Applicable
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=54794Issue Tracking, Mailing List, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.htmlRelease Notes, Vendor Advisory
http://secunia.com/advisories/41888Broken Link
http://www.securityfocus.com/bid/44241Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/2731Not Applicable
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201Third Party Advisory

Timeline

Published: Oct 21, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-40429.8Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibl CVE-2010-40434.3Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequen CVE-2010-40444.3Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote CVE-2010-40459.3Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote a CVE-2010-40464.3Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by us CVE-2010-40474.3Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assiste CVE-2010-40484.3Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the CVE-2010-40494.3Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode CVE-2010-40504.3Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element CVE-2010-40515.0The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent att CVE-2010-40525.0Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2 CVE-2010-40539.0Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 a