Vulnerability CVE-2010-3116

Vulnerability Name:

CVE-2010-3116 (CCN-61235)

Assigned:

2010-08-19

Published:

2010-08-19

Updated:

2020-08-04

Summary:

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

3.7 Low (REDHAT CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
2.7 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-416

Vulnerability Consequences:

Gain Access

References:

Source: CONFIRM
Type: Permissions Required
http://code.google.com/p/chromium/issues/detail?id=50515

Source: CONFIRM
Type: Permissions Required
http://code.google.com/p/chromium/issues/detail?id=51835

Source: MITRE
Type: CNA
CVE-2010-3116

Source: CCN
Type: Google Chrome Releases Web site
Stable Channel Update

Source: CONFIRM
Type: Vendor Advisory
http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.html

Source: APPLE
Type: Mailing List, Third Party Advisory
APPLE-SA-2010-11-18-1

Source: APPLE
Type: Mailing List, Third Party Advisory
APPLE-SA-2010-11-22-1

Source: SUSE
Type: Mailing List, Third Party Advisory
SUSE-SR:2011:002

Source: CCN
Type: RHSA-2011-0177
Moderate: webkitgtk security update

Source: CCN
Type: SA41014
Google Chrome Multiple Vulnerabilities

Source: SECUNIA
Type: Third Party Advisory
41856

Source: CCN
Type: SA42314
Apple iOS Multiple Vulnerabilities

Source: SECUNIA
Type: Third Party Advisory
42314

Source: SECUNIA
Type: Third Party Advisory
43068

Source: SECUNIA
Type: Third Party Advisory
43086

Source: CCN
Type: Apple Safari Web site
About the security content of Safari 5.0.3 and Safari 4.1.3

Source: CONFIRM
Type: Third Party Advisory
http://support.apple.com/kb/HT4455

Source: CCN
Type: Apple Web site
About the security content of iOS 4.2

Source: CONFIRM
Type: Third Party Advisory
http://support.apple.com/kb/HT4456

Source: MANDRIVA
Type: Third Party Advisory
MDVSA-2011:039

Source: CCN
Type: OSVDB ID: 67462
Google Chrome MIME Type Processing Weakness Memory Corruption DoS

Source: REDHAT
Type: Third Party Advisory
RHSA-2011:0177

Source: CCN
Type: BID-42571
Google Chrome prior to 5.0.375.127 Multiple Security Vulnerabilities

Source: BID
Type: Third Party Advisory, VDB Entry
44200

Source: CCN
Type: BID-44200
WebKit MIME Type Handling CVE-2010-3116 Memory Corruption Vulnerability

Source: UBUNTU
Type: Third Party Advisory
USN-1006-1

Source: VUPEN
Type: Third Party Advisory
ADV-2010-2722

Source: VUPEN
Type: Third Party Advisory
ADV-2010-3046

Source: VUPEN
Type: Third Party Advisory
ADV-2011-0212

Source: VUPEN
Type: Third Party Advisory
ADV-2011-0216

Source: VUPEN
Type: Third Party Advisory
ADV-2011-0552

Source: XF
Type: UNKNOWN
chrome-mime-type-code-exec(61235)

Source: OVAL
Type: Third Party Advisory
oval:org.mitre.oval:def:11909

Source: SUSE
Type: SUSE-SR:2011:002
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:google:chrome:*:*:*:*:*:*:*:* (Version < 5.0.375.127)

Configuration 2:

cpe:/a:apple:safari:*:*:*:*:*:*:*:* (Version < 4.1.3)

OR cpe:/a:apple:safari:*:*:*:*:*:*:*:* (Version >= 5.0 and < 5.0.3)

OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version < 4.2)

Configuration 3:

cpe:/a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* (Version < 1.2.6)

Configuration 4:

cpe:/o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*

OR cpe:/a:apple:safari:4.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.0.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.0.2:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.0.4:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:4.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.55:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.70:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.86:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.99:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:*:*:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.125:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:5.0.375.126:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:apple:safari:5.0.2:*:*:*:*:*:*:*

OR cpe:/o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0.1:-:ipodtouch:*:*:*:*:*

OR cpe:/o:apple:ios:4.0:-:ipodtouch:*:*:*:*:*

AND

cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*

OR cpe:/h:apple:ipad:*:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20103116	V	CVE-2010-3116	2015-11-16
oval:org.mitre.oval:def:23285	P	ELSA-2011:0177: webkitgtk security update (Moderate)	2014-05-26
oval:org.mitre.oval:def:21433	P	RHSA-2011:0177: webkitgtk security update (Moderate)	2014-02-24
oval:org.mitre.oval:def:11909	V	Vulnerability while processing MIME types in Google Chrome before 5.0.375.127	2013-08-12
oval:com.redhat.rhsa:def:20110177	P	RHSA-2011:0177: webkitgtk security update (Moderate)	2011-01-25

BACK