High severity8.8NVD Advisory· Published Sep 24, 2010· Updated Apr 29, 2026
CVE-2010-1772
CVE-2010-1772
Description
Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.
Affected products
9cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
19- trac.webkit.org/changeset/59859nvdMailing ListPatch
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- code.google.com/p/chromium/issues/detailnvdExploitIssue TrackingMailing List
- lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.htmlnvdMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlnvdMailing ListThird Party Advisory
- www.ubuntu.com/usn/USN-1006-1nvdThird Party Advisory
- bugs.webkit.org/show_bug.cginvdPermissions RequiredVendor Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11661nvdBroken LinkThird Party Advisory
- googlechromereleases.blogspot.com/2010/06/stable-channel-update.htmlnvdRelease Notes
- secunia.com/advisories/40072nvdBroken Link
- secunia.com/advisories/40557nvdBroken Link
- secunia.com/advisories/41856nvdBroken Link
- secunia.com/advisories/43068nvdBroken Link
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.vupen.com/english/advisories/2010/1801nvdBroken Link
- www.vupen.com/english/advisories/2010/2722nvdBroken Link
- www.vupen.com/english/advisories/2011/0212nvdBroken Link
- www.vupen.com/english/advisories/2011/0552nvdBroken Link
News mentions
0No linked articles in our index yet.