High severity8.8NVD Advisory· Published Nov 6, 2010· Updated Apr 29, 2026
CVE-2010-4206
CVE-2010-4206
Description
Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.
Affected products
3- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
14- trac.webkit.org/changeset/70652nvdMailing ListPatchVendor Advisory
- code.google.com/p/chromium/issues/detailnvdExploitIssue TrackingMailing ListVendor Advisory
- googlechromereleases.blogspot.com/2010/11/stable-channel-update.htmlnvdRelease NotesVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.htmlnvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/45721nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2011/0216nvdPermissions RequiredThird Party Advisory
- www.vupen.com/english/advisories/2011/0552nvdPermissions RequiredThird Party Advisory
- bugs.webkit.org/show_bug.cginvdPermissions RequiredVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11949nvdThird Party Advisory
- secunia.com/advisories/42109nvdBroken Link
- secunia.com/advisories/43086nvdBroken Link
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.redhat.com/support/errata/RHSA-2011-0177.htmlnvdNot Applicable
News mentions
0No linked articles in our index yet.