CVE-2010-0655: Use After Free
Published Feb 18, 2010
·Updated
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.
Affected Software
47 affected components
Google Chrome=2.0.172.8
Google Chrome=0.3.154.3
Google Chrome=3.0.182.2
Google Chrome<=4.0.249.78
Google Chrome=0.2.149.30
Google Chrome=0.4.154.31
Google Chrome=1.0.154.39
Google Chrome=2.0.172.38
Google Chrome=1.0.154.59
Google Chrome=0.2.149.27
Google Chrome=1.0.154.53
Google Chrome=0.4.154.33
Google Chrome=2.0.170.0
Google Chrome=1.0.154.43
Google Chrome=1.0.154.42
Google Chrome=2.0.169.1
Google Chrome=2.0.172.33
Google Chrome=3.0.195.24
Google Chrome=3.0.195.33
Google Chrome=1.0.154.52
Google Chrome=2.0.172.27
Google Chrome=1.0.154.65
Google Chrome=2.0.157.2
Google Chrome=0.4.154.18
Google Chrome=0.2.149.29
Google Chrome=2.0.157.0
Google Chrome=0.2.152.1
Google Chrome=0.3.154.0
Google Chrome=0.2.153.1
Google Chrome=2.0.172.2
Google Chrome=3.0.195.21
Google Chrome=2.0.169.0
Google Chrome=1.0.154.36
Google Chrome=2.0.172
Google Chrome=2.0.172.30
Google Chrome=3.0.193.2-beta
Google Chrome=2.0.156.1
Google Chrome=3.0.195.32
Google Chrome=1.0.154.46
Google Chrome=3.0.190.2
Google Chrome=0.4.154.22
Google Chrome=2.0.159.0
Google Chrome=2.0.158.0
Google Chrome=2.0.172.28
Google Chrome=2.0.172.31
Google Chrome=1.0.154.48
Google Chrome=2.0.172.37
Remediation
Event History
Feb 18, 2010
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
Description
Data Sourced
via NVD·06:00 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0655?
CVE-2010-0655 has a severity rating that includes potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2010-0655?
To fix CVE-2010-0655, users should update Google Chrome to version 4.0.249.78 or later.
3
What versions of Google Chrome are affected by CVE-2010-0655?
CVE-2010-0655 affects multiple versions of Google Chrome prior to 4.0.249.78.
4
What type of vulnerability is CVE-2010-0655?
CVE-2010-0655 is classified as a use-after-free vulnerability.
5
Can CVE-2010-0655 lead to remote attacks?
Yes, CVE-2010-0655 allows remote attackers to exploit the vulnerability given user assistance.