Buffer overflow in Google Chrome

CVE-2009-2578

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.

Vulnerability class: Buffer Overflow

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 2.0.156.1, 2.0.157.0, 2.0.157.2
  • N/a — versions n/a

Weakness classification (CWE)

References