CVE-2009-2578

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-07-22 · updated 2026-06-16
Weakness: CWE-119

Description

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.

Affected products

Google Chrome: 2.0.156.1, 2.0.157.0, 2.0.157.2, 2.0.158.0, 2.0.159.0, 2.0.172

References

http://websecurity.com.ua/3338/
http://www.securityfocus.com/archive/1/505092/100/0/threaded
http://websecurity.com.ua/3338/
http://www.securityfocus.com/archive/1/505092/100/0/threaded

Get alerted when CVE-2009-2578 or the next vulnerability affects your stack