Out-of-bounds

2013-10-0210:35:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.4%

JSON

The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.

CPENameOperatorVersion
chromeeq30.0.1599.6
chromeeq30.0.1599.28
chromeeq30.0.1599.14
chromeeq30.0.1599.0
chromeeq30.0.1599.7
chromeeq30.0.1599.38
chromeeq30.0.1599.31
chromeeq30.0.1599.15
chromeeq30.0.1599.9
chromeeq30.0.1599.42

Name	Operator	Version
chrome	eq	30.0.1599.6
chrome	eq	30.0.1599.28
chrome	eq	30.0.1599.14
chrome	eq	30.0.1599.0
chrome	eq	30.0.1599.7
chrome	eq	30.0.1599.38
chrome	eq	30.0.1599.31
chrome	eq	30.0.1599.15
chrome	eq	30.0.1599.9
chrome	eq	30.0.1599.42