CVEvulnerability
CVE-2010-4041
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2010-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Affected configurations
• google chrome (< 7.0.517.41)
References
- http://code.google.com/p/chromium/issues/detail?id=54794 Issue Tracking, Mailing List, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html Release Notes, Vendor Advisory
- http://secunia.com/advisories/41888 Broken Link
- http://www.securityfocus.com/bid/44241 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2010/2731 Not Applicable
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=54794 Issue Tracking, Mailing List, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html Release Notes, Vendor Advisory
- http://secunia.com/advisories/41888 Broken Link
- http://www.securityfocus.com/bid/44241 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2010/2731 Not Applicable
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201 Third Party Advisory