CVE

Id
43247  
CVE No.
CVE-2010-0663  
Status
Candidate  
Description
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.  
Phase
Assigned (20100218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471243 43247 CVE-2010-0663 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=31307  View
471244 43247 CVE-2010-0663 CONFIRM:http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html  View
471245 43247 CVE-2010-0663 CONFIRM:http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
471246 43247 CVE-2010-0663 OVAL:oval:org.mitre.oval:def:14002  View
471247 43247 CVE-2010-0663 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14002  View
471248 43247 CVE-2010-0663 SECTRACK:1023506  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38726 JVNDB-2010-004511 MoinMoin における重要な情報を取得される脆弱性 MoinMoin には、GATEWAY_INTERFACE 環境変数が設定されている状況では sys.argv 配列の計画消去を実行しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-0667 43247 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004511.html  View