CVEvulnerability
CVE-2010-0663
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.
Affected configurations
• google chrome (<= 4.0.249.0)
• google chrome 0.2.149.27
• google chrome 0.2.149.29
• google chrome 0.2.149.30
• google chrome 0.2.152.1
• google chrome 0.2.153.1
• google chrome 0.3.154.0
• google chrome 0.3.154.3
• google chrome 0.4.154.18
• google chrome 0.4.154.22
• google chrome 0.4.154.31
• google chrome 0.4.154.33
• google chrome 1.0.154.36
• google chrome 1.0.154.39
• google chrome 1.0.154.42
• google chrome 1.0.154.43
• google chrome 1.0.154.46
• google chrome 1.0.154.48
• google chrome 1.0.154.52
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 1.0.154.65
• google chrome 2.0.156.1
• google chrome 2.0.157.0
• google chrome 2.0.157.2
• google chrome 2.0.158.0
• google chrome 2.0.159.0
• google chrome 2.0.169.0
• google chrome 2.0.169.1
• google chrome 2.0.170.0
• google chrome 2.0.172
• google chrome 2.0.172.2
• google chrome 2.0.172.8
• google chrome 2.0.172.27
• google chrome 2.0.172.28
• google chrome 2.0.172.30
• google chrome 2.0.172.31
• google chrome 2.0.172.33
• google chrome 2.0.172.37
• google chrome 2.0.172.38
• google chrome 3.0.182.2
• google chrome 3.0.190.2
• google chrome 3.0.193.2
• google chrome 3.0.195.21
• google chrome 3.0.195.24
• google chrome 3.0.195.32
• google chrome 3.0.195.33
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=31307 code.google.com
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html Patch
- http://securitytracker.com/id?1023506 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=31307 code.google.com
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html Patch
- http://securitytracker.com/id?1023506 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002 oval.cisecurity.org