CVE:CVE-2009-2121
CNNVD:CNNVD-200906-368
Google Chrome是Google发布的开源WEB浏览器 。
Google Chrome在处理HTTP服务器的响应时存在缓冲区溢出漏洞。如果用户受骗访问了恶意网站并从服务器接收到了包含有超长分块编码块大小的响应报文，就会在memmove()中触发溢出，导致浏览器崩溃或执行任意代码 。
solution:Upgrade google chrome to a higher version than 2.0.172,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,and avoid the version (,2.0.172],0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0