CVE-2009-2578: Google Chrome

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.

Affected products

• Google Chrome: version 2.0.156.1 only; version 2.0.157.0 only; version 2.0.157.2 only; version 2.0.158.0 only; version 2.0.159.0 only; version 2.0.172 only

Published 2009-07-22. Last modified 2026-06-16.