Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.
2011-02-04T18:00:03.280
2025-04-11T00:51:21.963
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | chrome | < 9.0.597.84 | Yes | |
Operating System | debian | debian_linux | 6.0 | Yes |
Operating System | debian | debian_linux | 7.0 | Yes |