CVE-2010-1676

CVE-2010-1676 describes a critical heap-based buffer overflow vulnerability affecting Tor versions prior to 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha. This flaw allows remote attackers to trigger a denial of service by crashing the daemon or potentially execute arbitrary code through unspecified vectors. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.