CVE:CVE-2009-2555
CNNVD:CNNVD-200907-306
Google V8 代码src/jsregexp.cc 存在堆缓冲溢出漏洞。在Google Chrome 2.0.172.37之前的版本中使用时，远程攻击者借助畸形JavaScript正则表达式在Chrome沙箱中执行任意代码。
solution:Upgrade google v8 to a higher version than 1.0,and avoid the version (,1.0]; Upgrade google chrome to a higher version than 2.0.172.33,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.172,2.0.172.30,2.0.172.31,and avoid the version (,2.0.172.33],0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.172,2.0.172.30,2.0.172.31