製品・ソフトウェアに関する情報

JVN脆弱性詳細

Google Chrome の browser kernel におけるバッファオーバーフローの脆弱性

Title	Google Chrome の browser kernel におけるバッファオーバーフローの脆弱性
Summary	Google Chrome の browser kernel には、バッファオーバーフローの脆弱性が存在します。
Possible impacts	リモート HTTP サーバにより、巧妙に細工されたレスポンスを介して、サービス運用妨害 (DoS) 状態にされる、または任意のコードを実行される可能性があります。
Solution	ベンダ情報及び参考情報を参照して適切な対策を実施してください。
Publication Date	June 22, 2009, midnight
Registration Date	Oct. 19, 2010, 2:50 p.m.
Last Update	Oct. 19, 2010, 2:50 p.m.

Affected System

Google

Google Chrome 2.0.172.33 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2009-2121	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2121
National Vulnerability Database (NVD)
2	CVE-2009-2121	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2121

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Google
1	Google Chrome	http://www.google.com/chrome/intl/ja/landing.html?hl=ja
2	stable-beta-update-security-fix	http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html

その他

No	Name	URL
ISS X-Force Database
1	51307	http://xforce.iss.net/xforce/xfdb/51307
OPEN SOURCE VULNERABILITY DATABASE (OSVDB)
2	55278	http://osvdb.org/55278
Secunia Advisory
3	SA35548	http://secunia.com/advisories/35548
SecurityFocus
4	35462	http://www.securityfocus.com/bid/35462
SecurityTracker
5	1022429	http://www.securitytracker.com/id?1022429
VUPEN Security
6	VUPEN/ADV-2009-1656	http://www.vupen.com/english/advisories/2009/1656

Change Log

No	Changed Details	Date of change
0	[2010年10月19日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2009-2121

Summary	Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.
Summary	Desbordamiento de búfer en el núcleo del navegador en Google Chrome en versiones anteriores a la v2.0.172.33 permite a los servidores HTTP remotos causar una denegación de servicio (mediante caida de la aplicación) o posiblemente ejecutar código arbitrario a través de una respuesta HTTP modificada.
Publication Date	June 24, 2009, 6:30 a.m.
Registration Date	Jan. 29, 2021, 1:19 p.m.
Last Update	April 23, 2026, 9:35 a.m.

Affected software configurations

Related information, measures and tools

No	URL	refsource
1	http://code.google.com/p/chromium/issues/detail?id=14508	cve@mitre.org
2	http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html	cve@mitre.org
3	http://osvdb.org/55278	cve@mitre.org
4	http://secunia.com/advisories/35548	cve@mitre.org
5	http://www.securityfocus.com/bid/35462	cve@mitre.org
6	http://www.securitytracker.com/id?1022429	cve@mitre.org
7	http://www.vupen.com/english/advisories/2009/1656	cve@mitre.org
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/51307	cve@mitre.org
9	http://code.google.com/p/chromium/issues/detail?id=14508	af854a3a-2127-422b-91ae-364da2661108
10	http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html	af854a3a-2127-422b-91ae-364da2661108
11	http://osvdb.org/55278	af854a3a-2127-422b-91ae-364da2661108
12	http://secunia.com/advisories/35548	af854a3a-2127-422b-91ae-364da2661108
13	http://www.securityfocus.com/bid/35462	af854a3a-2127-422b-91ae-364da2661108
14	http://www.securitytracker.com/id?1022429	af854a3a-2127-422b-91ae-364da2661108
15	http://www.vupen.com/english/advisories/2009/1656	af854a3a-2127-422b-91ae-364da2661108
16	https://exchange.xforce.ibmcloud.com/vulnerabilities/51307	af854a3a-2127-422b-91ae-364da2661108

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html