CVE-2010-0663 Information disclosure in n/a
Remote attackers can obtain sensitive process memory information via insufficient data in bitmap handling, requiring user interaction with thumbnails or canvas.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2010-0663?
CVE-2010-0663 is a medium-severity vulnerability in Google Chrome, published on 18 Feb 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.
Weakness: CWE-200
Which versions are affected by CVE-2010-0663?
It affects 1 product.
Products include Google Chrome.
How do I fix CVE-2010-0663?
No fix has been published for CVE-2010-0663 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-0663 being exploited?
There is no known exploitation of CVE-2010-0663 in the wild and no public exploit code.
Other vulnerabilities in Google Chrome
Sources
Also known as GHSA-5pvm-xfh9-cf8m.