製品・ソフトウェアに関する情報

JVN脆弱性詳細

WebKit の CSSParser::parseFontFaceSrc 関数におけるサービス運用妨害 (DoS) の脆弱性

Title	WebKit の CSSParser::parseFontFaceSrc 関数におけるサービス運用妨害 (DoS) の脆弱性
Summary	WebKit の WebCore/css/CSSParser.cpp 内にある CSSParser::parseFontFaceSrc 関数は、Cascading Style Sheets (CSS) のトークンシーケンスを適切に構文解析しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工されたローカルフォントを介して、サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Dec. 13, 2010, midnight
Registration Date	Feb. 22, 2011, 2:07 p.m.
Last Update	Feb. 22, 2011, 2:07 p.m.

CVSS2.0 : 警告
Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected System

レッドハット

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Workstation 6

Google

Chrome OS 8.0.552.343 未満

Google Chrome 8.0.552.224 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-4577	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4577
National Vulnerability Database (NVD)
2	CVE-2010-4577	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4577

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Google
1	Google Chrome	http://www.google.com/chrome/intl/ja/landing.html?hl=ja
2	stable-beta-channel-updates_13	http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html
Red Hat Security Advisory
3	RHSA-2011:0177	https://rhn.redhat.com/errata/RHSA-2011-0177.html

その他

No	Name	URL
Secunia Advisory
1	SA43086	http://secunia.com/advisories/43086
SecurityFocus
2	45722	http://www.securityfocus.com/bid/45722
VUPEN Security
3	VUPEN/ADV-2011-0216	http://www.vupen.com/english/advisories/2011/0216

Change Log

No	Changed Details	Date of change
0	[2011年02月22日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-4577

Summary	The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."
Publication Date	Dec. 22, 2010, 10 a.m.
Registration Date	Jan. 29, 2021, 11:09 a.m.
Last Update	Nov. 21, 2024, 10:21 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:webkitgtk:webkitgtk::::::::				1.2.6
cpe:2.3:o:google:chrome_os::::::::				8.0.552.343
cpe:2.3:a:google:chrome::::::::				8.0.552.224

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:13:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:7.0:::::::*
cpe:2.3:o:debian:debian_linux:6.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://code.google.com/p/chromium/issues/detail?id=63866	Exploit Issue Tracking Mailing List
2	http://code.google.com/p/chromium/issues/detail?id=63866	Exploit Issue Tracking Mailing List
3	http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html	Release Notes
4	http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html	Release Notes
5	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html	Mailing List Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html	Mailing List Third Party Advisory
7	http://secunia.com/advisories/42648	Broken Link Third Party Advisory
8	http://secunia.com/advisories/42648	Broken Link Third Party Advisory
9	http://secunia.com/advisories/43086	Broken Link Third Party Advisory
10	http://secunia.com/advisories/43086	Broken Link Third Party Advisory
11	http://trac.webkit.org/changeset/72685	Mailing List Patch
12	http://trac.webkit.org/changeset/72685	Mailing List Patch
13	http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp	Mailing List Patch
14	http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp	Mailing List Patch
15	http://www.debian.org/security/2011/dsa-2188	Mailing List Third Party Advisory
16	http://www.debian.org/security/2011/dsa-2188	Mailing List Third Party Advisory
17	http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml	Third Party Advisory
18	http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml	Third Party Advisory
19	http://www.redhat.com/support/errata/RHSA-2011-0177.html	Broken Link Third Party Advisory
20	http://www.redhat.com/support/errata/RHSA-2011-0177.html	Broken Link Third Party Advisory
21	http://www.securityfocus.com/bid/45722	Broken Link Third Party Advisory VDB Entry
22	http://www.securityfocus.com/bid/45722	Broken Link Third Party Advisory VDB Entry
23	http://www.vupen.com/english/advisories/2011/0216	Broken Link Third Party Advisory
24	http://www.vupen.com/english/advisories/2011/0216	Broken Link Third Party Advisory
25	https://bugs.webkit.org/show_bug.cgi?id=49883	Permissions Required
26	https://bugs.webkit.org/show_bug.cgi?id=49883	Permissions Required
27	https://bugzilla.redhat.com/show_bug.cgi?id=667025	Issue Tracking Third Party Advisory
28	https://bugzilla.redhat.com/show_bug.cgi?id=667025	Issue Tracking Third Party Advisory
29	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953	Broken Link Third Party Advisory
30	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953	Broken Link Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-125	境界外読み取り	https://cwe.mitre.org/data/definitions/125.html
2	CWE-843	型の取り違え	https://cwe.mitre.org/data/definitions/843.html