The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade webkit-gtk2 | Dec 10, 2025 | Dec 30, 2010 |
| Gentoo Linux | — | Upgrade net-analyzer/sflowtool.Upgrade sys-cluster/resource-agents.Upgrade x11-apps/xrdb.Upgrade net-libs/libsoup.Upgrade gnome-base/gdm.Upgrade net-misc/vino.Upgrade dev-libs/xmlsec.Upgrade app-admin/syslog-ng.Upgrade dev-db/unixODBC.Upgrade net-libs/webkit-gtk.Upgrade sys-fs/lvm2.Upgrade sys-apps/shadow.Upgrade dev-php/PEAR-Mail.Upgrade dev-php/PEAR-PEAR.Upgrade net-misc/rsync.Upgrade media-sound/lastfmplayer.Upgrade dev-util/qt-creator.Upgrade net-misc/mrouted.Upgrade games-sports/racer-bin.Upgrade dev-vcs/gitolite.Upgrade media-libs/xine-lib.Upgrade media-libs/fmod.Upgrade app-misc/ca-certificates.Upgrade app-office/gnucash.Upgrade dev-util/oprofile. | Oct 30, 2017 | Dec 21, 2010 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Dec 21, 2010 |
| Oracle_linux | — | Upgrade webkitgtk-docUpgrade webkitgtkUpgrade webkitgtk-devel | Oct 16, 2024 | Dec 22, 2010 |
| Ubuntu | — | Upgrade libwebkit-1.0-2 | Nov 8, 2024 | Dec 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub