CVE-2010-1772

Published: Sep 24, 2010Modified: Apr 29, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.

Affected (9)

Products: Google: Chrome · Redhat: Enterprise Linux · Canonical: Ubuntu Linux · +2 more

Show all products

Google: Chrome · Redhat: Enterprise Linux · Canonical: Ubuntu Linux · Opensuse: Opensuse · Fedoraproject: Fedora

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 5.0.375.70

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 9.10

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.2
Opensuse Opensuse	Version 11.3

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

http://code.google.com/p/chromium/issues/detail?id=44868

Source: product-security@apple.com

ExploitIssue TrackingMailing List

http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html

Source: product-security@apple.com

Release Notes

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/40072

Source: product-security@apple.com

Broken Link

http://secunia.com/advisories/40557

Source: product-security@apple.com

Broken Link

http://secunia.com/advisories/41856

Source: product-security@apple.com

Broken Link

http://secunia.com/advisories/43068

Source: product-security@apple.com

Broken Link

http://trac.webkit.org/changeset/59859

Source: product-security@apple.com

Mailing ListPatch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

Broken Link

http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1801

Source: product-security@apple.com

Broken Link

http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Broken Link

http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Broken Link

http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Broken Link

https://bugs.webkit.org/show_bug.cgi?id=39388

Source: product-security@apple.com

Permissions RequiredVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=596498

Source: product-security@apple.com

Issue TrackingPatchThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11661

Source: product-security@apple.com

Broken LinkThird Party Advisory

http://code.google.com/p/chromium/issues/detail?id=44868