VULNERABILITY INTELLIGENCE

CVE-2010-1772

CVSS score8.8 HIGH

EPSS probability1.97%

CISA KEVNot currently listed

Published2010-09-24

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.

Weakness classification

CWE-416: Use After Free

Primary references

product-security@apple.com — Exploit, Issue Tracking, Mailing List
product-security@apple.com — Release Notes
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Mailing List, Patch
product-security@apple.com — Broken Link
product-security@apple.com — Third Party Advisory