CVE-2010-4203 — Vulnetix

CVE-2010-4203 PUBLISHED CVSS 9.800000190734863 CRITICAL

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.

EPSS 8.12% · 92.3th percentile

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

8.12%

92.3th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_workstation	6.0
google	chrome	0
webmproject	libvpx	0

Timeline

Nov 5, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score
Sep 7, 2023 EPSS Score
Oct 30, 2023 EPSS Score

References

42690 third-party-advisory
oval:org.mitre.oval:def:12198 vdb
http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html url
GLSA-201101-03 vendor-advisory
RHSA-2010:0999 vendor-advisory
42109 third-party-advisory
http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG url
http://code.google.com/p/chromium/issues/detail?id=60055 url
42118 third-party-advisory
ADV-2011-0115 vdb
http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53 url
42908 third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-4203 advisory
http://review.webmproject.org/gitweb?p=libvpx.git;a=blob;f=CHANGELOG url
http://review.webmproject.org/gitweb?p=libvpx.git;a=commit;h=09bcc1f710ea65dc158639479288fb1908ff0c53 url

Open in Interactive Console →