7.5

CVE-2010-1237

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.

Data is provided by the National Vulnerability Database (NVD)
Google ≫ Chrome Version4.1.249.0
Google ≫ Chrome Version4.1.249.1001
Google ≫ Chrome Version4.1.249.1004
Google ≫ Chrome Version4.1.249.1006
Google ≫ Chrome Version4.1.249.1007
Google ≫ Chrome Version4.1.249.1008
Google ≫ Chrome Version4.1.249.1009
Google ≫ Chrome Version4.1.249.1010
Google ≫ Chrome Version4.1.249.1011
Google ≫ Chrome Version4.1.249.1012
Google ≫ Chrome Version4.1.249.1013
Google ≫ Chrome Version4.1.249.1014
Google ≫ Chrome Version4.1.249.1015
Google ≫ Chrome Version4.1.249.1016
Google ≫ Chrome Version4.1.249.1017
Google ≫ Chrome Version4.1.249.1018
Google ≫ Chrome Version4.1.249.1019
Google ≫ Chrome Version4.1.249.1020
Google ≫ Chrome Version4.1.249.1021
Google ≫ Chrome Version4.1.249.1022
Google ≫ Chrome Version4.1.249.1023
Google ≫ Chrome Version4.1.249.1024
Google ≫ Chrome Version4.1.249.1025
Google ≫ Chrome Version4.1.249.1026
Google ≫ Chrome Version4.1.249.1027
Google ≫ Chrome Version4.1.249.1028
Google ≫ Chrome Version4.1.249.1029
Google ≫ Chrome Version4.1.249.1030
Google ≫ Chrome Version4.1.249.1031
Google ≫ Chrome Version4.1.249.1032
Google ≫ Chrome Version4.1.249.1033
Google ≫ Chrome Version4.1.249.1034
Google ≫ Chrome Version4.1.249.1035
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.52% 0.641
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.