Google Chrome Multiple Security Vulnerabilities

Bugtraq ID:	34859
Class:	Boundary Condition Error
CVE:	CVE-2009-1441 CVE-2009-1442
Remote:	Yes
Local:	No
Published:	May 05 2009 12:00AM
Updated:	May 05 2009 12:00AM
Credit:	Google
Vulnerable:	Google Chrome 1.0.154 .61 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.36
Not Vulnerable:	Google Chrome 1.0.154.64

Google Chrome Multiple Security Vulnerabilities

Google Chrome is prone to multiple vulnerabilities.

An attacker can exploit these issues to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Google Chrome 1.0.154.64 are vulnerable.

Google Chrome Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Google Chrome Multiple Security Vulnerabilities

References:

• Buffer overflow in browser process while de-serializing SkBitmap (heap overwrite (Google)
  
• Google Chrome Homepage (Google)
  
• SkMask::computeImageSize() integer overflow (Google)
  
• Stable Update: Security Fix (Google)