The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade webkit-gtk2 | Dec 10, 2025 | Dec 30, 2010 |
| Gentoo Linux | — | Upgrade app-misc/ca-certificates.Upgrade media-libs/fmod.Upgrade dev-util/oprofile.Upgrade app-office/gnucash.Upgrade net-misc/mrouted.Upgrade dev-vcs/gitolite.Upgrade games-sports/racer-bin.Upgrade media-libs/xine-lib.Upgrade net-libs/webkit-gtk.Upgrade dev-db/unixODBC.Upgrade gnome-base/gdm.Upgrade net-misc/vino.Upgrade dev-php/PEAR-Mail.Upgrade app-admin/syslog-ng.Upgrade sys-apps/shadow.Upgrade net-libs/libsoup.Upgrade net-analyzer/sflowtool.Upgrade media-sound/lastfmplayer.Upgrade sys-cluster/resource-agents.Upgrade dev-libs/xmlsec.Upgrade dev-php/PEAR-PEAR.Upgrade x11-apps/xrdb.Upgrade sys-fs/lvm2.Upgrade net-misc/rsync.Upgrade dev-util/qt-creator. | Oct 30, 2017 | Dec 21, 2010 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Dec 21, 2010 |
| Oracle_linux | — | Upgrade webkitgtk-docUpgrade webkitgtkUpgrade webkitgtk-devel | Oct 16, 2024 | Dec 22, 2010 |
| Ubuntu | — | Upgrade libwebkit-1.0-2 | Nov 8, 2024 | Dec 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub