CVE-2009-2974 PUBLISHED CVSS 5 MEDIUM

Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.

EPSS 0.54% · 67.6th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.54%
67.6th percentile

Affected Products

VendorProductVersions
n/an/an/a
googlechrome0, 0.2.149.27, 0.2.149.29

Timeline

References

Open in Interactive Console →