CVE-2010-4203 | Vulnetix

CVE-2010-4203 PUBLISHED CVSS 9.800000190734863 CRITICAL

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.

EPSS 4.57% · 91.1th percentile

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.57%

91.1th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_workstation	6.0
google	chrome	0
webmproject	libvpx	0

Timeline

Nov 5, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
Jul 18, 2023 EPSS Score
Sep 9, 2023 EPSS Score
Nov 1, 2023 EPSS Score

References

http://code.google.com/p/chromium/issues/detail?id=60055 url
http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html url
42109 third-party-advisory
http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG url
http://secunia.com/advisories/42118 technical
http://security.gentoo.org/glsa/glsa-201101-03.xml advisory
http://www.vupen.com/english/advisories/2011/0115 technical
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12198 advisory
http://secunia.com/advisories/42690 technical
https://rhn.redhat.com/errata/RHSA-2010-0999.html advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-4203 advisory
http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53 url
http://review.webmproject.org/gitweb?p=libvpx.git;a=blob;f=CHANGELOG url
http://review.webmproject.org/gitweb?p=libvpx.git;a=commit;h=09bcc1f710ea65dc158639479288fb1908ff0c53 url
http://secunia.com/advisories/42908 url

Open in Interactive Console →