CVE-2009-2935
First published: Thu Aug 27 2009(Updated: )
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Chrome | <=2.0.172.37 | |
| Google Chrome | =0.2.149.27 | |
| Google Chrome | =0.2.149.29 | |
| Google Chrome | =0.2.149.30 | |
| Google Chrome | =0.2.152.1 | |
| Google Chrome | =0.2.153.1 | |
| Google Chrome | =0.3.154.0 | |
| Google Chrome | =0.3.154.3 | |
| Google Chrome | =0.4.154.18 | |
| Google Chrome | =0.4.154.22 | |
| Google Chrome | =0.4.154.31 | |
| Google Chrome | =0.4.154.33 | |
| Google Chrome | =1.0.154.36 | |
| Google Chrome | =1.0.154.39 | |
| Google Chrome | =1.0.154.42 | |
| Google Chrome | =1.0.154.43 | |
| Google Chrome | =1.0.154.46 | |
| Google Chrome | =1.0.154.48 | |
| Google Chrome | =1.0.154.52 | |
| Google Chrome | =1.0.154.53 | |
| Google Chrome | =1.0.154.59 | |
| Google Chrome | =2.0.156.1 | |
| Google Chrome | =2.0.157.0 | |
| Google Chrome | =2.0.157.2 | |
| Google Chrome | =2.0.158.0 | |
| Google Chrome | =2.0.159.0 | |
| Google Chrome | =2.0.172 | |
| Google Chrome | =2.0.172.30 | |
| Google Chrome | =2.0.172.31 | |
| Google Chrome | =2.0.172.33 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://code.google.com/p/chromium/issues/detail?id=18639
- http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html
- http://osvdb.org/57421
- http://secunia.com/advisories/36417
- http://www.securityfocus.com/bid/36149
- http://www.securitytracker.com/id?1022773
- http://www.vupen.com/english/advisories/2009/2420
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52902
- agent/references
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google chrome
- version/google chrome/0.3.154.3
- version/google chrome/0.2.149.30
- version/google chrome/0.4.154.31
- version/google chrome/1.0.154.39
- version/google chrome/1.0.154.59
- version/google chrome/0.2.149.27
- version/google chrome/1.0.154.53
- version/google chrome/0.4.154.33
- version/google chrome/1.0.154.43
- version/google chrome/1.0.154.42
- version/google chrome/2.0.172.33
- version/google chrome/1.0.154.52
- version/google chrome/2.0.157.2
- version/google chrome/0.4.154.18
- version/google chrome/0.2.149.29
- version/google chrome/2.0.157.0
- version/google chrome/0.2.152.1
- version/google chrome/0.3.154.0
- version/google chrome/0.2.153.1
- version/google chrome/1.0.154.36
- version/google chrome/2.0.172
- version/google chrome/2.0.172.37
- version/google chrome/2.0.172.30
- version/google chrome/2.0.156.1
- version/google chrome/1.0.154.46
- version/google chrome/0.4.154.22
- version/google chrome/2.0.159.0
- version/google chrome/2.0.158.0
- version/google chrome/2.0.172.31
- version/google chrome/1.0.154.48