Описание
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
Ссылки
- ExploitIssue TrackingPatchVendor Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions Required
- Third Party Advisory
- ExploitIssue TrackingPatchVendor Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions Required
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 9.0.597.84 (исключая)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.01436
Низкий
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
больше 15 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
debian
больше 15 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key ...
github
больше 4 лет назад
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
EPSS
Процентиль: 70%
0.01436
Низкий
5 Medium
CVSS2
Дефекты
CWE-20