Description
The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
References
- oval:org.mitre.oval:def:14411 vdb-entry signature
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html
- 45097 third-party-advisory
- http://code.google.com/p/chromium/issues/detail?id=77493
- 1025730 vdb-entry