Google Skia contains an out-of-bounds read flaw in the 'do_anti_hairline' function in core/SkScan_Antihair.cpp when handling integer NaN while attempting to draw anti-hairlines. With specially crafted graphics, a context-dependent attacker can cause a crash or potentially disclose memory contents.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Availability
Solution:
Upgrade
Exploit:
PoC Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
It has been reported that this issue has been fixed. Upgrade to revision r3558, or higher, to address this vulnerability.
Upgrade to Google Chrome version 19.0.1084.46 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
