CVE-2010-4576: Null Pointer Dereference
browser/workerhost/messageportdispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4576?
CVE-2010-4576 has a high severity rating due to its potential to cause a denial of service through application crashes.
How do I fix CVE-2010-4576?
To fix CVE-2010-4576, update to Google Chrome version 8.0.552.224 or later and Chrome OS version 8.0.552.343 or later.
What platforms are affected by CVE-2010-4576?
CVE-2010-4576 affects Google Chrome versions prior to 8.0.552.224 and Chrome OS versions prior to 8.0.552.343.
What type of vulnerability is CVE-2010-4576?
CVE-2010-4576 is a denial of service vulnerability related to improper handling of postMessage calls.
Can CVE-2010-4576 be exploited remotely?
Yes, CVE-2010-4576 can be exploited remotely using crafted JavaScript to trigger application crashes.