VULNERABILITY INTELLIGENCE

CVE-2009-2974

CVSS score5 MEDIUM

EPSS probability1.24%

CISA KEVNot currently listed

Published2009-08-27

Last modified2026-06-16

Description

Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.