CVE-2010-0663: Exposure of Sensitive Information to an Unauthorized Actor

The ParamTraits ::Read function in common/commonparamtraits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data,...

CVE-2010-0662: Undefined Security Weakness

The ParamTraits ::Read function in common/commonparamtraits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified...

CVE-2009-1441: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ParamTraits ::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...