CVE

Id
43248  
CVE No.
CVE-2010-0664  
Status
Candidate  
Description
Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.  
Phase
Assigned (20100218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471249 43248 CVE-2010-0664 MISC:http://exchange.kg/other/chrome3_0day-denial_of_service_crash.html  View
471250 43248 CVE-2010-0664 MISC:http://twitter.com/akirsanov/statuses/7370288490  View
471251 43248 CVE-2010-0664 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=31517  View
471252 43248 CVE-2010-0664 CONFIRM:http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html  View
471253 43248 CVE-2010-0664 CONFIRM:http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs  View
471254 43248 CVE-2010-0664 OVAL:oval:org.mitre.oval:def:14097  View
471255 43248 CVE-2010-0664 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14097  View
471256 43248 CVE-2010-0664 SECTRACK:1023506  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38727 JVNDB-2010-004512 MoinMoin における脆弱性 MoinMoin は、空白でない superuser リスト、有効にされた xmlrpc アクション、有効にされた SyncPages アクション、または設定された OpenID のコンフィギュレーションに不備があるため、不特定の影響を受ける脆弱性が存在します。 CVE-2010-0668 43248 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004512.html  View