What’s Vulnerable › Vulnerabilities
CVE-2009-2974
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-08-27 · updated 2026-06-16
Description
Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.
Affected products
- Google Chrome: through 1.0.154.48; 0.2.149.27, 0.2.149.29, 0.2.149.30, 0.2.152.1, 0.2.153.1, 0.3.154.0 (+14)
References
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html
- http://websecurity.com.ua/3435/
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html
- http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html
- http://websecurity.com.ua/3435/
Get alerted when CVE-2009-2974 or the next vulnerability affects your stack