Описание
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
Ссылки
- ExploitIssue TrackingPatchVendor Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions Required
- Third Party Advisory
- ExploitIssue TrackingPatchVendor Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions Required
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 9.0.597.84 (исключая)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01479
Низкий
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
почти 15 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
debian
почти 15 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key ...
github
больше 3 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
EPSS
Процентиль: 81%
0.01479
Низкий
5 Medium
CVSS2
Дефекты
CWE-20