CVE:CVE-2009-2974
CNNVD:CNNVD-200908-444
Google Chrome 1.0.154.65，1.0.154.48以及之前的版本允许远程攻击者(1)借助一个涉及文档位置属性的chromehtml：URI值，来引起拒绝服务攻击(应用程序中止)；或(2)借助涉及一系列功能呼叫的向量，来引起拒绝服务攻击(应用程序中止和CPU耗竭)。这些呼叫用于设置文档位置属性的chromehtml: URI值。
solution:Upgrade google chrome to a higher version than 1.0.154.48,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.65,and avoid the version (,1.0.154.48],0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.52,1.0.154.53,1.0.154.59,1.0.154.65