CVE-2010-1665: Buffer Overflow
Published Apr 30, 2010
·Updated
Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors.
Affected Software
108 affected components
Google Chrome=4.1.249.1017
Google Chrome=2.0.172.8
Google Chrome=0.3.154.3
Google Chrome=3.0.182.2
Google Chrome=4.1.249.1001
Google Chrome=4.1.249.1011
Google Chrome=4.1.249.1022
Google Chrome=0.2.149.30
Google Chrome=4.1.249.1027
Google Chrome=3.0.195.38
Google Chrome=0.4.154.31
Google Chrome=1.0.154.39
Google Chrome=2.0.172.38
Google Chrome=1.0.154.59
Google Chrome=4.1.249.1008
Google Chrome=0.2.149.27
Google Chrome=1.0.154.53
Google Chrome=0.4.154.33
Google Chrome=2.0.170.0
Google Chrome=4.1.249.1019
Google Chrome=1.0.154.43
Google Chrome=4.1.249.1042
Google Chrome=4.1.249.1012
Google Chrome=3.0.195.2
Google Chrome=4.1.249.1006
Google Chrome=1.0.154.42
Google Chrome=2.0.169.1
Google Chrome=4.1.249.1014
Google Chrome=2.0.172.33
Google Chrome=4.1.249.1028
Google Chrome=3.0.195.24
Google Chrome=4.1.249.1007
Google Chrome=4.1-beta
Google Chrome=3.0.195.33
Google Chrome=4.1.249.1059
Google Chrome=4.1.249.1045
Google Chrome=4.1.249.1009
Google Chrome=4.1.249.1036
Google Chrome=4.1.249.1018
Google Chrome=1.0.154.52
Google Chrome=2.0.172.27
Google Chrome=4.1.249.1034
Google Chrome=4.1.249.1058
Google Chrome=1.0.154.65
Google Chrome=4.1.249.0
Google Chrome=4.1.249.1029
Google Chrome=2.0.157.2
Google Chrome=4.1.249.1051
Google Chrome=0.4.154.18
Google Chrome=3.0.195.27
Google Chrome=4.1.249.1048
Google Chrome=0.2.149.29
Google Chrome=3.0.195.25
Google Chrome=2.0.157.0
Google Chrome=4.1.249.1025
Google Chrome=4.1.249.1010
Google Chrome=4.1.249.1057
Google Chrome=0.2.152.1
Google Chrome=0.3.154.0
Google Chrome=4.1.249.1050
Google Chrome=4.1.249.1053
Google Chrome=4.1.249.1026
Google Chrome=4.1.249.1024
Google Chrome=3.0.195.36
Google Chrome=0.2.153.1
Google Chrome=4.1.249.1031
Google Chrome=2.0.172.2
Google Chrome=3.0.195.21
Google Chrome=4.1.249.1032
Google Chrome=4.1.249.1004
Google Chrome<=4.1.249.1063
Google Chrome=1.0.154.64
Google Chrome=2.0.169.0
Google Chrome=4.1.249.1047
Google Chrome=1.0.154.36
Google Chrome=2.0.172
Google Chrome=2.0.172.30
Google Chrome=3.0.193.2-beta
Google Chrome=4.1.249.1052
Google Chrome=2.0.156.1
Google Chrome=4.1.249.1060
Google Chrome=4.1.249.1056
Google Chrome=4.1.249.1033
Google Chrome=3.0.195.32
Google Chrome=4.1.249.1030
Google Chrome=4.1.249.1016
Google Chrome=1.0.154.46
Google Chrome=3.0.190.2
Google Chrome=4.1.249.1055
Google Chrome=4.1.249.1046
Google Chrome=0.4.154.22
Google Chrome=4.1.249.1023
Google Chrome=2.0.159.0
Google Chrome=4.1.249.1062
Google Chrome=2.0.158.0
Google Chrome=4.1.249.1049
Google Chrome=2.0.172.28
Google Chrome=4.1.249.1035
Google Chrome=2.0.172.31
Google Chrome=1.0.154.48
Google Chrome=4.1.249.1061
Google Chrome=4.1.249.1054
Google Chrome=4.1.249.1020
Google Chrome=2.0.172.37
Google Chrome=3.0.195.37
Google Chrome=4.1.249.1015
Google Chrome=4.1.249.1013
Google Chrome=4.1.249.1021
Event History
Apr 30, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 3, 2010
Data Sourced
via NVD·01:51 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1665?
CVE-2010-1665 has been rated with a medium severity level due to its potential to cause denial of service through memory corruption.
2
How does CVE-2010-1665 affect Google Chrome users?
CVE-2010-1665 allows remote attackers to potentially crash the browser or exploit it through specially crafted fonts.
3
How do I fix CVE-2010-1665?
To address CVE-2010-1665, users should upgrade to the latest version of Google Chrome that is not vulnerable to this flaw.
4
What versions of Google Chrome are affected by CVE-2010-1665?
CVE-2010-1665 affects multiple versions of Google Chrome prior to 4.1.249.1064.
5
Is there a workaround for CVE-2010-1665 if I cannot update immediately?
Currently, the best mitigation for CVE-2010-1665 is to avoid opening suspicious links or files that may contain malicious fonts.