CVE-2010-4206

Description

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Mailing List, Vendor Advisory
• cve@mitre.org — Release Notes, Vendor Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Mailing List, Patch, Vendor Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Vendor Advisory