CVE-2010-0664: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.

Affected products

• Google Chrome: up to and including 4.0.249.0; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2010-02-18. Last modified 2026-06-16.