CVE Vulnerabilities

CVE-2009-2974

Published: Aug 27, 2009 | Modified: Aug 28, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.

Affected Software

Name Vendor Start Version End Version
Chrome Google 0.2.149.27 0.2.149.27
Chrome Google 0.2.149.29 0.2.149.29
Chrome Google 0.2.149.30 0.2.149.30
Chrome Google 0.2.152.1 0.2.152.1
Chrome Google 0.2.153.1 0.2.153.1
Chrome Google 0.3.154.0 0.3.154.0
Chrome Google 0.3.154.3 0.3.154.3
Chrome Google 0.4.154.18 0.4.154.18
Chrome Google 0.4.154.22 0.4.154.22
Chrome Google 0.4.154.31 0.4.154.31
Chrome Google 0.4.154.33 0.4.154.33
Chrome Google 1.0.154.36 1.0.154.36
Chrome Google 1.0.154.39 1.0.154.39
Chrome Google 1.0.154.42 1.0.154.42
Chrome Google 1.0.154.43 1.0.154.43
Chrome Google 1.0.154.46 1.0.154.46
Chrome Google * 1.0.154.48
Chrome Google 1.0.154.52 1.0.154.52
Chrome Google 1.0.154.53 1.0.154.53
Chrome Google 1.0.154.59 1.0.154.59
Chrome Google 1.0.154.65 1.0.154.65

References