CVE-2010-0647

webkit: remote arbitrary code execution via malformed RUBY element

Published Feb 18, 2010 CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Description
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:59 AM
Reserved
Feb 18, 2010, 12:00 AM
Status
Modified
Published
Feb 18, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:16 PM
Severity
Critical
Public date
Jan 6, 2010, 12:00 AM