CVE-2010-2297

rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*

History

No history.

Information

Published : 2010-06-15 18:00

Updated : 2023-12-10 11:03


NVD link : CVE-2010-2297

Mitre link : CVE-2010-2297

CVE.ORG link : CVE-2010-2297


JSON object : View

Products Affected

opensuse

  • opensuse

google

  • chrome

suse

  • suse_linux_enterprise_desktop
  • suse_linux_enterprise_server
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')