CVE

Id
41368  
CVE No.
CVE-2009-3933  
Status
Candidate  
Description
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.  
Phase
Assigned (20091112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
454064 41368 CVE-2009-3933 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=25892  View
454065 41368 CVE-2009-3933 CONFIRM:http://codereview.chromium.org/339039  View
454066 41368 CVE-2009-3933 CONFIRM:http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html  View
454067 41368 CVE-2009-3933 CONFIRM:http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310  View
454068 41368 CVE-2009-3933 CONFIRM:http://src.chromium.org/viewvc/chrome?view=rev&revision=30311  View
454069 41368 CVE-2009-3933 CONFIRM:http://trac.webkit.org/changeset/50173  View
454070 41368 CVE-2009-3933 CONFIRM:https://bugs.webkit.org/show_bug.cgi?id=30833  View
454071 41368 CVE-2009-3933 SUSE:SUSE-SR:2011:002  View
454072 41368 CVE-2009-3933 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
454073 41368 CVE-2009-3933 OSVDB:59745  View
454074 41368 CVE-2009-3933 URL:http://www.osvdb.org/59745  View
454075 41368 CVE-2009-3933 SECUNIA:43068  View
454076 41368 CVE-2009-3933 URL:http://secunia.com/advisories/43068  View
454077 41368 CVE-2009-3933 VUPEN:ADV-2011-0212  View
454078 41368 CVE-2009-3933 URL:http://www.vupen.com/english/advisories/2011/0212  View
454079 41368 CVE-2009-3933 XF:googlechrome-webkit-dos(54297)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45461 JVNDB-2009-006468 Sun OpenSolaris の Solaris TCP ソケットにおけるサービス運用妨害 (DoS) の脆弱性 Sun OpenSolaris の Solaris TCP ソケットは、メモリリークにより、および "補助データ" を処理する tcp_sendmsg に関する処理に不備があるため、サービス運用妨害 (カーネルメモリの消費) 状態となる脆弱性が存在します。 CVE-2009-3937 41368 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006468.html  View