CVE-2009-3932

Description

The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."

References

http://www.vupen.com/english/advisories/2009/3159

http://www.securityfocus.com/bid/36947

http://www.osvdb.org/59743

http://secunia.com/advisories/37273

http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html

http://code.google.com/p/chromium/issues/detail?id=26179

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3