Vulnerability · NVD

CVE-2010-3116

CVE-2010-3116, Severity pending severity (CVSS —): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 3.7 %
Tracked apps: 3
Still exposed: 0

Published on 2010-08-24

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

EPSS 3.69% above median percentile 88.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Safari macOS com.apple.Safari

Affected <4.1.3 Fixed in 4.1.3 Latest tracked - undetermined
Chrome macOS com.google.Chrome

Affected <5.0.375.127 Fixed in 5.0.375.127 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected <5.0.375.127 Fixed in 5.0.375.127 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (4)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	chrome All platforms (wildcard)	All platforms (wildcard)	<5.0.375.127	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	<5.0.375.127	cpe:2.3:a:google:chrome::::::::
apple	safari All platforms (wildcard)	All platforms (wildcard)	<4.1.3	cpe:2.3:a:apple:safari::::::::
apple	safari All platforms (wildcard)	All platforms (wildcard)	≥5.0 <5.0.3	cpe:2.3:a:apple:safari::::::::

View on NVD ↗ Advisory · googlechromereleases.blogspot.com