CVE-2009-1441

Description

Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory