CVE-2010-1766

CVE-2010-1766 describes an off-by-one error in the WebKit rendering engine, specifically within the WebSocketHandshake function. This flaw, present in products like Qt and WebKit, allows a malicious WebSocket server to trigger memory corruption and a denial of service by sending a long, invalid upgrade header. The vulnerability carries a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and a lack of widespread attention.