Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2010-1823: Chrome, Safari, iTunes may crash from malicious web page

CVE-2010-1823 · published 16 years ago

Summary

Web pages that contain specially crafted CSS can cause the web engine used by Google Chrome, Apple Safari and iTunes to stop working or potentially allow additional unwanted actions. This happens because the software frees memory too early and then tries to use it again. Updating the browsers and iTunes to the latest versions will fix the issue; if you cannot update, avoid visiting unknown or untrusted websites.

What to do

Update google chrome to version 6.0.472.59 or later.
Update apple itunes to version 10.5 or later.
Update apple safari to version 5.0.6 or later.

Affected software

Vendor	Product	Affected versions
google	chrome	< 6.0.472.59 `cpe:2.3:a:google:chrome::::::::`
apple	itunes	< 10.5 `cpe:2.3:a:apple:itunes::::::::`
apple	safari	< 5.0.6 `cpe:2.3:a:apple:safari::::::::`

Original advisory text

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.

References

http://code.google.com/p/chromium/issues/detail?id=50250 Issue Tracking Patch Vendor Advisory
http://secunia.com/advisories/43068 Third Party Advisory
http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.... Vendor Advisory
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html Mailing List Third Party Advisory
http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html Mailing List Third Party Advisory
http://support.apple.com/kb/HT4808 Third Party Advisory
http://support.apple.com/kb/HT4981 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0212 Third Party Advisory
https://bugs.webkit.org/show_bug.cgi?id=43055 Permissions Required
https://bugs.webkit.org/show_bug.cgi?id=44533 Issue Tracking Patch Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.3 Critical

Exploitation

3% chance of attack within 30 days

Type

CWE-416Use After Free

Timeline

Published24 Sep 2010

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2010-1823 · NVD

Track software like this

Free during beta