VULNERABILITY INTELLIGENCE

CVE-2010-1773

CVSS score8.8 HIGH

EPSS probability2.15%

CISA KEVNot currently listed

Published2010-09-24

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.

Weakness classification

CWE-193: Off-by-one Error

Primary references

product-security@apple.com — Mailing List, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Mailing List, Patch, Vendor Advisory
product-security@apple.com — Broken Link
product-security@apple.com — Third Party Advisory, VDB Entry