CVE-2009-1442

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://code.google.com/p/chromium/issues/detail?id=10736	Exploit
http://code.google.com/p/skia/source/detail?r=159
http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html	Patch Vendor Advisory
http://osvdb.org/54248
http://secunia.com/advisories/35014
http://www.securityfocus.com/bid/34859
http://www.securitytracker.com/id?1022175
http://www.vupen.com/english/advisories/2009/1266

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:google:chrome::::::::
	cpe:2.3:a:google:chrome:0.2.149.29:::::::*
	cpe:2.3:a:google:chrome:0.2.149.30:::::::*
	cpe:2.3:a:google:chrome:0.2.152.1:::::::*
	cpe:2.3:a:google:chrome:0.2.153.1:::::::*
	cpe:2.3:a:google:chrome:0.3.154.0:::::::*
	cpe:2.3:a:google:chrome:0.3.154.3:::::::*
	cpe:2.3:a:google:chrome:0.4.154.18:::::::*
	cpe:2.3:a:google:chrome:0.4.154.22:::::::*
	cpe:2.3:a:google:chrome:0.4.154.31:::::::*
	cpe:2.3:a:google:chrome:0.4.154.33:::::::*
	cpe:2.3:a:google:chrome:1.0.154.36:::::::*
	cpe:2.3:a:google:chrome:1.0.154.39:::::::*
	cpe:2.3:a:google:chrome:1.0.154.42:::::::*
	cpe:2.3:a:google:chrome:1.0.154.43:::::::*
	cpe:2.3:a:google:chrome:1.0.154.46:::::::*
	cpe:2.3:a:google:chrome:1.0.154.59:::::::*
	cpe:2.3:a:google:chrome:2.0.156.1:::::::*
	cpe:2.3:a:google:chrome:2.0.157.0:::::::*
	cpe:2.3:a:google:chrome:2.0.157.2:::::::*
	cpe:2.3:a:google:chrome:2.0.158.0:::::::*
	cpe:2.3:a:google:chrome:2.0.159.0:::::::*

History

No history.

Information

Published : 2009-05-07 17:30

Updated : 2024-02-28 11:21

NVD link : CVE-2009-1442

Mitre link : CVE-2009-1442

CVE.ORG link : CVE-2009-1442

JSON object : View

Products Affected

google

chrome

CWE

CWE-189

Numeric Errors

{"id": "CVE-2009-1442", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-05-07T17:30:04.797", "references": [{"url": "http://code.google.com/p/chromium/issues/detail?id=10736", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://code.google.com/p/skia/source/detail?r=159", "source": "cve@mitre.org"}, {"url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/54248", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35014", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/34859", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1022175", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/1266", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas."}, {"lang": "es", "value": "M\u00faltiples desbodamientos de enteros en Skia, utilizado en Google Chrome v1.x anteriores a v1.0.154.64 y v2.x, y posiblemente Android, deber\u00eda permitir a los atacantes remotos ejecutar arbitrariamente c\u00f3digo en el proceso de renderizado a trav\u00e9s de (1) imagenes o (2) canvas manipulados."}], "lastModified": "2009-05-19T05:35:05.593", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22A411BE-895D-4D8F-B14B-AAEB3112F9F6", "versionEndIncluding": "1.0.154.53"}, {"criteria": "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B8FF77A-7802-4963-B532-3F16C7BB012C"}, {"criteria": "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D73576CF-76EE-42A3-9955-D7991384B8C1"}, {"criteria": "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"}, {"criteria": "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66A4FEB5-11D8-4FFC-972D-A3B991176040"}, {"criteria": "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6313614-FC3C-488C-B80B-191797319A56"}, {"criteria": "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"}, {"criteria": "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"}, {"criteria": "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0D94F22-37B6-4938-966A-E1830D83FBC3"}, {"criteria": "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"}, {"criteria": "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C0F9D75-B10D-468F-84D8-61B6A1230556"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "173D539E-045E-4429-80C9-5749BECC6CD5"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2052352-FECC-4990-B0F4-A715694AD816"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}, {"criteria": "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"}, {"criteria": "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2F95770-F36F-43C0-986F-5C819648271E"}, {"criteria": "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"}, {"criteria": "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F6CA696-49AA-4445-B978-96C1D8CE58DF"}, {"criteria": "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"}, {"criteria": "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8497F93-D88A-4FFA-B988-7210608530A8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}