CVE-2010-0663 Information

Description

The ParamTraitsSkBitmap::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data related to use of a (1) thumbnail database or (2) HTML canvas.

Reference

http://code.google.com/p/chromium/issues/detail?id=31307 http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html http://securitytracker.com/id?1023506 http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A14002