← Database

CVE-2010-1823

CRITICAL CVSS: 9.3 Published: 2010-09-24 Modified: 2026-06-16

Description

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.

Affected Platforms

Apple ItunesApple SafariGoogle Chrome

Weakness Type

CWE-416

References