Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.

The version of Google Chrome installed on the remote host is earlier than 4.0.249.78.  Such versions are reportedly affected by multiple vulnerabilities :

  - A pop-up blocker bypass. (Issue #3275)

  - Cross-domain theft due to CSS design error.
    (Issue #9877)

  - Browser memory error with stale pop-up block menu.
    (Issue #12523)

  - An unspecified error allows XMLHttpRequests to     directories. (Issue #20450)

  - An unspecified error exists related to escaping     characters in shortcuts. (Issue #23693)

  - Renderer memory errors exist when drawing on canvases.
    (Issue #8864, #24701, #24646)

  - An image decoding memory error. (Issue #28566)

  - An unspecified error exists that could result in failure     to strip 'Referer'. (Issue #29920)

  - An unspecified cross-domain access error. (Issue #30666)

  - An unspecified bitmap deserialization error.
    (Issue #31307)

  - An unspecified browser crash related to nested URLs.
    (Issue #31517)

Detections

Analytics

CVE-2010-0664

medium

Tenable Plugins

high