CVEvulnerability

CVE-2009-1441

9.3 HIGH Published 2009-05-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-05-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.

Affected configurations

• google chrome (<= 1.0.154.53) • google chrome 0.2.149.29 • google chrome 0.2.149.30 • google chrome 0.2.152.1 • google chrome 0.2.153.1 • google chrome 0.3.154.0 • google chrome 0.3.154.3 • google chrome 0.4.154.18 • google chrome 0.4.154.22 • google chrome 0.4.154.31 • google chrome 0.4.154.33 • google chrome 1.0.154.36 • google chrome 1.0.154.39 • google chrome 1.0.154.42 • google chrome 1.0.154.43 • google chrome 1.0.154.46 • google chrome 1.0.154.59

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References