CVE-2010-0663: Infoleak
The ParamTraits<SkBitmap>::Read function in common/commonparamtraits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0663?
CVE-2010-0663 has been classified as a high severity vulnerability due to its potential for information disclosure.
How does CVE-2010-0663 affect users of Google Chrome?
CVE-2010-0663 can allow remote attackers to access sensitive information from process memory by exploiting uninitialized memory locations in Chrome.
What versions of Google Chrome are affected by CVE-2010-0663?
CVE-2010-0663 affects multiple versions of Google Chrome prior to 4.0.249.78, including versions 2.0 and 3.0.
How do I fix CVE-2010-0663?
To fix CVE-2010-0663, users should upgrade to Google Chrome version 4.0.249.78 or later as it contains the necessary patches.
What should I do if I cannot update my version of Google Chrome affected by CVE-2010-0663?
If updating is not possible, users should consider employing additional security measures such as using a different browser until they can upgrade.