| Package | Affected versions | Patched versions |
|---|---|---|
| webkit | ≤ r53524 | |
| chrome | = 0.2.149.27= 0.2.149.29= 0.2.149.30= 0.2.152.1= 0.2.153.1= 0.3.154.0= 0.3.154.3= 0.4.154.18= 0.4.154.22= 0.4.154.31= 0.4.154.33= 1.0.154.36= 1.0.154.39= 1.0.154.42= 1.0.154.43= 1.0.154.46= 1.0.154.48= 1.0.154.52= 1.0.154.53= 1.0.154.59= 1.0.154.65= 2.0.156.1= 2.0.157.0= 2.0.157.2= 2.0.158.0= 2.0.159.0= 2.0.169.0= 2.0.169.1= 2.0.170.0= 2.0.172= 2.0.172.2= 2.0.172.27= 2.0.172.28= 2.0.172.30= 2.0.172.31= 2.0.172.33= 2.0.172.37= 2.0.172.38= 2.0.172.8= 3.0.182.2= 3.0.190.2= 3.0.193.2= 3.0.195.21= 3.0.195.24= 3.0.195.32= 3.0.195.33= 4.0.244.0≤ 4.0.249.78 |
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free