Vulnerability-Lookup

CERTA-2009-AVI-180

Vulnerability from certfr_avis - Published: 2009-05-11 - Updated: 2009-05-11

Deux vulnérabilités dans Google Chrome permettent à une personne malintentionnée d'exécuter du code arbitraire à distance.

Description

Deux vulnérabilités ont été corrigées dans Google Chrome :

un débordement de mémoire dans la fonction ParamTraits\<SkBitmap>::Read permet à une personne malintentionnée d'effectuer un déni de service voire d'exécuter du code arbitraire (CVE-2009-1441) ;
un débordement d'entier dans le calcul de taille d'images permet à une personne malintentionnée distante d'effectuer un déni de service voire d'exécuter du code arbitraire au moyen d'une image spécialement conçue (CVE-2009-1442).

Solution

Les deux vulnérabilités sont corrigées dans la version 1.0.154.64.

Google Chrome versions antérieures à 1.0.154.64.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Rapport de bogue #10869 de Google Chromium du 22 avril 2009	None	vendor-advisory
Rapport de bogue #10736 de Google Chromium du 19 avril 2009	None	vendor-advisory
Bloc-notes de suivi de versions de Google Chrome : http://googlechromereleases.blogspot.com/	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eGoogle Chrome versions ant\u00e9rieures \u00e0 1.0.154.64.\u003c/P\u003e",
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans Google Chrome :\n\n-   un d\u00e9bordement de m\u00e9moire dans la fonction\n    ParamTraits\\\u003cSkBitmap\\\u003e::Read permet \u00e0 une personne malintentionn\u00e9e\n    d\u0027effectuer un d\u00e9ni de service voire d\u0027ex\u00e9cuter du code arbitraire\n    (CVE-2009-1441) ;\n-   un d\u00e9bordement d\u0027entier dans le calcul de taille d\u0027images permet \u00e0\n    une personne malintentionn\u00e9e distante d\u0027effectuer un d\u00e9ni de service\n    voire d\u0027ex\u00e9cuter du code arbitraire au moyen d\u0027une image\n    sp\u00e9cialement con\u00e7ue (CVE-2009-1442).\n\n## Solution\n\nLes deux vuln\u00e9rabilit\u00e9s sont corrig\u00e9es dans la version 1.0.154.64.\n",
  "cves": [
    {
      "name": "CVE-2009-1441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1441"
    },
    {
      "name": "CVE-2009-1442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1442"
    }
  ],
  "initial_release_date": "2009-05-11T00:00:00",
  "last_revision_date": "2009-05-11T00:00:00",
  "links": [
    {
      "title": "Bloc-notes de suivi de versions de Google Chrome :      http://googlechromereleases.blogspot.com/",
      "url": "http://googlechromreleases.blogspot.com"
    }
  ],
  "reference": "CERTA-2009-AVI-180",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-05-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eGoogle Chrome\u003c/span\u003e\npermettent \u00e0 une personne malintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire\n\u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Rapport de bogue #10869 de Google Chromium du 22 avril 2009",
      "url": "http://code.google.com/p/chromium/issues/details?id=10869"
    },
    {
      "published_at": null,
      "title": "Rapport de bogue #10736 de Google Chromium du 19 avril 2009",
      "url": "http://code.google.com/p/chromium/issues/details?id=10736"
    }
  ]
}

CVE-2009-1441 (GCVE-0-2009-1441)

Vulnerability from cvelistv5 – Published: 2009-05-07 17:00 – Updated: 2024-08-07 05:13

Summary

Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://code.google.com/p/chromium/issues/detail?i…	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1266	vdb-entryx_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.securitytracker.com/id?1022174	vdb-entryx_refsource_SECTRACK
	http://osvdb.org/54288	vdb-entryx_refsource_OSVDB
	http://googlechromereleases.blogspot.com/2009/05/…	x_refsource_CONFIRM
	http://secunia.com/advisories/35014	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/34859	vdb-entryx_refsource_BID

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.567Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://code.google.com/p/chromium/issues/detail?id=10869"
          },
          {
            "name": "ADV-2009-1266",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1266"
          },
          {
            "name": "chrome-paramtraitsskbitmapread-bo(50362)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50362"
          },
          {
            "name": "1022174",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022174"
          },
          {
            "name": "54288",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/54288"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
          },
          {
            "name": "35014",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35014"
          },
          {
            "name": "34859",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34859"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the ParamTraits\u003cSkBitmap\u003e::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://code.google.com/p/chromium/issues/detail?id=10869"
        },
        {
          "name": "ADV-2009-1266",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1266"
        },
        {
          "name": "chrome-paramtraitsskbitmapread-bo(50362)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50362"
        },
        {
          "name": "1022174",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022174"
        },
        {
          "name": "54288",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/54288"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
        },
        {
          "name": "35014",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35014"
        },
        {
          "name": "34859",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34859"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1441",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the ParamTraits\u003cSkBitmap\u003e::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://code.google.com/p/chromium/issues/detail?id=10869",
              "refsource": "CONFIRM",
              "url": "http://code.google.com/p/chromium/issues/detail?id=10869"
            },
            {
              "name": "ADV-2009-1266",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1266"
            },
            {
              "name": "chrome-paramtraitsskbitmapread-bo(50362)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50362"
            },
            {
              "name": "1022174",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022174"
            },
            {
              "name": "54288",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/54288"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
            },
            {
              "name": "35014",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35014"
            },
            {
              "name": "34859",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34859"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1441",
    "datePublished": "2009-05-07T17:00:00",
    "dateReserved": "2009-04-27T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1442 (GCVE-0-2009-1442)

Vulnerability from cvelistv5 – Published: 2009-05-07 17:00 – Updated: 2024-08-07 05:13

Summary

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://code.google.com/p/chromium/issues/detail?i…	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1266	vdb-entryx_refsource_VUPEN
	http://googlechromereleases.blogspot.com/2009/05/…	x_refsource_CONFIRM
	http://secunia.com/advisories/35014	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/54248	vdb-entryx_refsource_OSVDB
	http://www.securitytracker.com/id?1022175	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/34859	vdb-entryx_refsource_BID
	http://code.google.com/p/skia/source/detail?r=159	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:13:25.631Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://code.google.com/p/chromium/issues/detail?id=10736"
          },
          {
            "name": "ADV-2009-1266",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1266"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
          },
          {
            "name": "35014",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35014"
          },
          {
            "name": "54248",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/54248"
          },
          {
            "name": "1022175",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022175"
          },
          {
            "name": "34859",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34859"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://code.google.com/p/skia/source/detail?r=159"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-05-13T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://code.google.com/p/chromium/issues/detail?id=10736"
        },
        {
          "name": "ADV-2009-1266",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1266"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
        },
        {
          "name": "35014",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35014"
        },
        {
          "name": "54248",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/54248"
        },
        {
          "name": "1022175",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022175"
        },
        {
          "name": "34859",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34859"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://code.google.com/p/skia/source/detail?r=159"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1442",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://code.google.com/p/chromium/issues/detail?id=10736",
              "refsource": "CONFIRM",
              "url": "http://code.google.com/p/chromium/issues/detail?id=10736"
            },
            {
              "name": "ADV-2009-1266",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1266"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html"
            },
            {
              "name": "35014",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35014"
            },
            {
              "name": "54248",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/54248"
            },
            {
              "name": "1022175",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022175"
            },
            {
              "name": "34859",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34859"
            },
            {
              "name": "http://code.google.com/p/skia/source/detail?r=159",
              "refsource": "CONFIRM",
              "url": "http://code.google.com/p/skia/source/detail?r=159"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1442",
    "datePublished": "2009-05-07T17:00:00",
    "dateReserved": "2009-04-27T00:00:00",
    "dateUpdated": "2024-08-07T05:13:25.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2009-AVI-180

Description

Solution

CVE-2009-1441 (GCVE-0-2009-1441)

CVE-2009-1442 (GCVE-0-2009-1442)

Tags

Sightings

Nomenclature