Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.800567
Kategorie:Buffer overflow
Titel:Google Chrome Buffer Overflow Vulnerability
Zusammenfassung:Google Chrome is prone to a buffer overflow vulnerability.
Beschreibung:Summary:
Google Chrome is prone to a buffer overflow vulnerability.

Vulnerability Insight:
These flaws are due to:

- a boundary error in nitSkBitmapFromData() function while processing
vectors related to large bitmap that arrives over the IPC channel.

- a failure while validating the result of integer multiplication when
computing image sizes.

Vulnerability Impact:
Successful exploitation will let the attacker run arbitrary codes with the
privilege of logged on user or can craft a special images or canvas to
execute arbitrary code inside the sandboxed renderer (tab) process and cause
a tab to crash.

Affected Software/OS:
Google Chrome versions prior to 1.0.154.64, version 2.0.159.0 and prior.

Solution:
Upgrade to version 1.0.154.64.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-1441
BugTraq ID: 34859
http://www.securityfocus.com/bid/34859
http://osvdb.org/54288
http://www.securitytracker.com/id?1022174
http://secunia.com/advisories/35014
http://www.vupen.com/english/advisories/2009/1266
XForce ISS Database: chrome-paramtraitsskbitmapread-bo(50362)
https://exchange.xforce.ibmcloud.com/vulnerabilities/50362
Common Vulnerability Exposure (CVE) ID: CVE-2009-1442
http://osvdb.org/54248
http://www.securitytracker.com/id?1022175
CopyrightCopyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.