The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
References
Link | Resource |
---|---|
http://code.google.com/p/chromium/issues/detail?id=51739 | Patch Vendor Advisory |
http://code.google.com/p/chromium/issues/detail?id=51630 | Exploit Vendor Advisory |
http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html | Vendor Advisory |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12119 | Third Party Advisory |
Configurations
Information
Published : 2010-09-07 11:00
Updated : 2020-08-04 12:40
NVD link : CVE-2010-3254
Mitre link : CVE-2010-3254
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Products Affected
- chrome