Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.
The product does not correctly convert an object, resource, or structure from one type to a different type.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome_os | * | 8.0.552.344 (excluding) | |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | maverick | * |
| Chromium-browser | Ubuntu | natty | * |
| Chromium-browser | Ubuntu | upstream | * |
| Webkit | Ubuntu | hardy | * |
| Webkit | Ubuntu | lucid | * |
| Webkit | Ubuntu | maverick | * |
| Webkit | Ubuntu | upstream | * |