CVE-2009-2974
published 2009-08-27CVE-2009-2974: Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a…
PriorityP415medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.24%
66.2th percentile
Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 1.0.154.48 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.htmlhttp://archives.neohapsis.com/archives/bugtraq/2009-08/0236.htmlhttp://websecurity.com.ua/3435/http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.htmlhttp://archives.neohapsis.com/archives/bugtraq/2009-08/0236.htmlhttp://websecurity.com.ua/3435/
2009-08-27
Published