Improper input validation in Google Chrome

CVE-2009-2955

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 0.2.149.27, 0.2.149.29, 0.2.149.30
  • N/a — versions n/a

Weakness classification (CWE)

References