CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.46% chance of exploitation in the next 30 days, 94th percentile

Published

2010-02-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33664

Security advisories

• http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
• http://secunia.com/secunia_research/2009-65
• http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

References

• CVE Record
• NVD entry