CVEvulnerability

CVE-2009-1442

6.8 MEDIUM Published 2009-05-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-05-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-189

Description

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.

Affected configurations

• google chrome (<= 1.0.154.53) • google chrome 0.2.149.29 • google chrome 0.2.149.30 • google chrome 0.2.152.1 • google chrome 0.2.153.1 • google chrome 0.3.154.0 • google chrome 0.3.154.3 • google chrome 0.4.154.18 • google chrome 0.4.154.22 • google chrome 0.4.154.31 • google chrome 0.4.154.33 • google chrome 1.0.154.36 • google chrome 1.0.154.39 • google chrome 1.0.154.42 • google chrome 1.0.154.43 • google chrome 1.0.154.46 • google chrome 1.0.154.59 • google chrome 2.0.156.1 • google chrome 2.0.157.0 • google chrome 2.0.157.2 • google chrome 2.0.158.0 • google chrome 2.0.159.0

Related

Weakness · not in database (1)

References