CVE:CVE-2009-1441
CNNVD:CNNVD-200905-090
Google Chrome是Google发布的开源WEB浏览器。
Chrome的bool ParamTraits<SkBitmap>::Read(const Message* m, void** iter, SkBitmap*函数在调用bmp_data->InitSkBitmapFromData(r, variable_data, variable_data_size)时存在堆溢出。|bmp_data|与|variable_data|必须彼此保持一致，但没有执行检查。也就是说：
memcpy(bitmap->getPixels(), pixels, total_pixels);
这里|pixels|和|total_pixels|是受控的数据。
solution:Upgrade google chrome to a higher version than 1.0.154.53,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.59,and avoid the version (,1.0.154.53],0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.59