CVE-2010-4206: fedoraproject fedora Out-of-bounds Write

EPSS trend

Probability

2.52%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.52% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown

References

14 links

www.mandriva.com/security/advisories?name=MDVSA-2011:039Vendor AdvisoryX Refsource MANDRIVABroken Link
lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
trac.webkit.org/changeset/70652X Refsource MISCMailing ListPatchVendor Advisory
googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlX Refsource CONFIRMRelease NotesVendor Advisory
www.vupen.com/english/advisories/2011/0216VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
secunia.com/advisories/42109Third Party AdvisoryX Refsource SECUNIABroken Link
code.google.com/p/chromium/issues/detail?id=60688X Refsource CONFIRMExploitIssue TrackingMailing ListVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11949VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/43086Third Party AdvisoryX Refsource SECUNIABroken Link
bugs.webkit.org/show_bug.cgi?id=48371X Refsource MISCPermissions RequiredVendor Advisory

Show all 14 references

www.securityfocus.com/bid/45721VDB EntryX Refsource BIDThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-0177.htmlVendor AdvisoryX Refsource REDHATNot Applicable
bugzilla.redhat.com/show_bug.cgi?id=656129X Refsource CONFIRMIssue TrackingThird Party Advisory
www.vupen.com/english/advisories/2011/0552VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory

Related vulnerabilities

CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-11713debianwebkit2gtk+61.55%8y ago04-06-2018 14:00WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.CVE-2018-11646debianwebkit2gtk+568.02%8y ago01-06-2018 13:00webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.CVE-2018-11712debianwebkit2gtk+51.16%8y ago04-06-2018 14:00WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.CVE-2018-4117appleicloud+163.00%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.CVE-2018-4129appleicloud+122.02%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

All vulnerabilities infedora chrome webkitgtk

CVE-2010-4206: fedoraproject fedora Out-of-bounds Write

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References