Main Vulnerability Database Vulnerabilities #VU33974

Input validation error in Google Chrome - CVE-2010-2646

Published: July 6, 2010 / Updated: August 4, 2020

Vulnerability identifier: #VU33974

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2010-2646

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors.

Google Chrome
openssl (Alpine package)

Install update from vendor's website.

openssl (Alpine package) - addressed in versions 1.0.0a-r4, 1.0.0b-r0