CVE-2010-4197: fedoraproject fedora Use After Free
CVSS: 9.8v3.1CriticalModified
Published 05-11-2010Last modified 07-08-2024
Vulnerability summary
CVE-2010-4197 is a critical (CVSS 9.8) Use After Free vulnerability in fedoraproject fedora. EPSS estimates a 2.31% chance of exploitation in the next 30 days, higher than 83% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
2.31%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 05-11-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.
CVSS metrics
2 scores · 1 source · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.31%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.31% on 18-09-2026
18-09-202618-10-2026
EPSS score2.31%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (code.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Fedoraproject1 product
- fedoraEOL13
Google1 product
- chrome< 7.0.517.44
Webkitgtk1 product
- webkitgtk< 1.2.6
3 vendors · 3 products
References
14 links- www.mandriva.com/security/advisories?name=MDVSA-2011:039Vendor AdvisoryX Refsource MANDRIVABroken Link
- lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlX Refsource CONFIRMRelease NotesVendor Advisory
- code.google.com/p/chromium/issues/detail?id=51602X Refsource CONFIRMExploitIssue TrackingMailing ListVendor Advisory
- www.vupen.com/english/advisories/2011/0216VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
Show all 14 references
- www.vupen.com/english/advisories/2011/0552VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12266VDB EntrySignatureX Refsource OVALThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=656115X Refsource CONFIRMIssue TrackingPatchThird Party Advisory