CVE-2010-2302: Use After Free
Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2302?
CVE-2010-2302 is classified as a moderate severity vulnerability that can lead to denial of service or arbitrary code execution.
How do I fix CVE-2010-2302?
To fix CVE-2010-2302, update Google Chrome to version 5.0.375.70 or later.
Which versions of Google Chrome are affected by CVE-2010-2302?
CVE-2010-2302 affects all versions of Google Chrome prior to 5.0.375.70.
What type of vulnerability is CVE-2010-2302?
CVE-2010-2302 is a use-after-free vulnerability in the WebCore component of WebKit.
What platforms are impacted by CVE-2010-2302?
CVE-2010-2302 impacts Google Chrome and various openSUSE and SUSE Linux Enterprise Desktop and Server versions.