Vulnerability in Google Chrome

CVE-2009-3932

The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."

EPSS: 0.032 (86.9th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 0.2.149.27, 0.2.149.29, 0.2.149.30
  • N/a — versions n/a

References