critical9.8
CVE-2010-4041
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypa…
Impact
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 7.0.517.41 |
References
- NVD record
- CVE.org record
- http://code.google.com/p/chromium/issues/detail?id=54794
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201
- http://code.google.com/p/chromium/issues/detail?id=54794
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201