CVE-2009-1442

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-07 · updated 2026-06-16
Weakness: CWE-189

Description

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.

Affected products

Google Chrome: through 1.0.154.53; 0.2.149.29, 0.2.149.30, 0.2.152.1, 0.2.153.1, 0.3.154.0, 0.3.154.3 (+15)

References

http://code.google.com/p/chromium/issues/detail?id=10736
http://code.google.com/p/skia/source/detail?r=159
http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html
http://osvdb.org/54248
http://secunia.com/advisories/35014
http://www.securityfocus.com/bid/34859
http://www.securitytracker.com/id?1022175
http://www.vupen.com/english/advisories/2009/1266
http://code.google.com/p/chromium/issues/detail?id=10736
http://code.google.com/p/skia/source/detail?r=159
http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html
http://osvdb.org/54248

Get alerted when CVE-2009-1442 or the next vulnerability affects your stack