CVE-2009-2578

2009-07-2218:30:00

CWE-119

mitre

web.nvd.nist.gov

google chrome

remote attack

denial of service

unicode

cve-2009-2578

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.062

Percentile

93.6%

JSON

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.

Affected configurations

Nvd

Node

googlechromeMatch2.0.156.1

googlechromeMatch2.0.157.0

googlechromeMatch2.0.157.2

googlechromeMatch2.0.158.0

googlechromeMatch2.0.159.0

googlechromeMatch2.0.172

VendorProductVersionCPE
googlechrome2.0.158.0cpe:/a:google:chrome:2.0.158.0:::
googlechrome2.0.156.1cpe:/a:google:chrome:2.0.156.1:::
googlechrome2.0.157.2cpe:/a:google:chrome:2.0.157.2:::
googlechrome2.0.172cpe:/a:google:chrome:2.0.172:::
googlechrome2.0.159.0cpe:/a:google:chrome:2.0.159.0:::
googlechrome2.0.157.0cpe:/a:google:chrome:2.0.157.0:::

Vendor	Product	Version	CPE
google	chrome	2.0.158.0	cpe:/a:google:chrome:2.0.158.0:::
google	chrome	2.0.156.1	cpe:/a:google:chrome:2.0.156.1:::
google	chrome	2.0.157.2	cpe:/a:google:chrome:2.0.157.2:::
google	chrome	2.0.172	cpe:/a:google:chrome:2.0.172:::
google	chrome	2.0.159.0	cpe:/a:google:chrome:2.0.159.0:::
google	chrome	2.0.157.0	cpe:/a:google:chrome:2.0.157.0:::