Description
Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.
References
- http://code.google.com/p/chromium/issues/detail?id=10869
- ADV-2009-1266 vdb-entry
- chrome-paramtraitsskbitmapread-bo(50362) vdb-entry
- 1022174 vdb-entry
- 54288 vdb-entry
- http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html
- 35014 third-party-advisory
- 34859 vdb-entry