CVEvulnerability
CVE-2009-2935
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
Affected configurations
• google chrome (<= 2.0.172.37)
• google chrome 0.2.149.27
• google chrome 0.2.149.29
• google chrome 0.2.149.30
• google chrome 0.2.152.1
• google chrome 0.2.153.1
• google chrome 0.3.154.0
• google chrome 0.3.154.3
• google chrome 0.4.154.18
• google chrome 0.4.154.22
• google chrome 0.4.154.31
• google chrome 0.4.154.33
• google chrome 1.0.154.36
• google chrome 1.0.154.39
• google chrome 1.0.154.42
• google chrome 1.0.154.43
• google chrome 1.0.154.46
• google chrome 1.0.154.48
• google chrome 1.0.154.52
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 2.0.156.1
• google chrome 2.0.157.0
• google chrome 2.0.157.2
• google chrome 2.0.158.0
• google chrome 2.0.159.0
• google chrome 2.0.172
• google chrome 2.0.172.30
• google chrome 2.0.172.31
• google chrome 2.0.172.33
Related
Weakness · not in database (1)
References
- http://code.google.com/p/chromium/issues/detail?id=18639 Vendor Advisory
- http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html Vendor Advisory
- http://osvdb.org/57421 osvdb.org
- http://secunia.com/advisories/36417 Vendor Advisory
- http://www.securityfocus.com/bid/36149 www.securityfocus.com
- http://www.securitytracker.com/id?1022773 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2420 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52902 exchange.xforce.ibmcloud.com
- http://code.google.com/p/chromium/issues/detail?id=18639 Vendor Advisory
- http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html Vendor Advisory
- http://osvdb.org/57421 osvdb.org
- http://secunia.com/advisories/36417 Vendor Advisory
- http://www.securityfocus.com/bid/36149 www.securityfocus.com
- http://www.securitytracker.com/id?1022773 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2420 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52902 exchange.xforce.ibmcloud.com