medium5.0
CVE-2009-2974
Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtm…
Impact
Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 1.0.154.48 Versions 0.2.149.27, 0.2.149.29, 0.2.149.30, 0.2.152.1, 0.2.153.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html
- http://websecurity.com.ua/3435/
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html
- http://websecurity.com.ua/3435/