Candidate: CVE-2010-0663 PublicDate: 2010-02-18 18:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0663 Description: The ParamTraits::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas. Ubuntu-Description: Notes: Bugs: http://code.google.com/p/chromium/issues/detail?id=31307 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_chromium-browser: upstream: http://src.chromium.org/viewvc/chrome?view=rev&revision=35371 upstream_chromium-browser: needs-triage dapper_chromium-browser: DNE hardy_chromium-browser: DNE intrepid_chromium-browser: DNE jaunty_chromium-browser: DNE karmic_chromium-browser: DNE lucid_chromium-browser: not-affected (5.0.342.9~r43360-0ubuntu2) devel_chromium-browser: not-affected (5.0.375.38~r46659-0ubuntu1)