Google Chrome Single Thread Alert Out of Bounds Memory Access Vulnerability

Bugtraq ID:	34130
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 16 2009 12:00AM
Updated:	Apr 14 2009 02:46PM
Credit:	Aditya K Sood
Vulnerable:	Google Chrome 1.0.154.48
Not Vulnerable:

Google Chrome Single Thread Alert Out of Bounds Memory Access Vulnerability

Google Chrome is prone to a vulnerability that allows access to out-of-bounds memory. The problem occurs because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to cause the affected browser to stop responding and possibly to disclose potentially sensitive information. The attacker may also be able to execute arbitrary code, but this has not been confirmed.

Google Chrome 1.0.154.48 is vulnerable; other versions may also be affected.

NOTE: The validity of this vulnerability is in dispute due to conflicting reports. We will update this BID when more definitive information is available.

Google Chrome Single Thread Alert Out of Bounds Memory Access Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/34130-galrt.zip

Google Chrome Single Thread Alert Out of Bounds Memory Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Single Thread Alert Out of Bounds Memory Access Vulnerability

References:

• Google Chrome Homepage (Google)
  
• Bid 34130 Invalid ([email protected])
  
• In Response to Bid 34130 Invalid (Aditya K Sood <[email protected]>)