I'm just forwarding a report from JP-CERT about some crash. Their tracking #: VN: JVN#07091981 / TN: JPCERT#96464494 . I did not try to repro.


VULNERABILITY DETAILS
Crash. No code execution confirmed.

VERSION
Chrome Version: 46.0.2490.80 (64-bit) 
Operating System:   Mac OS X 10.9.5 (Mavericks) 

REPRODUCTION CASE
Application ends abnormally 
<Taken from crash report> 
Exception Type: EXC_BAD_ACCESS (SIGSEGV) 
Exception Codes: EXC_I386_GPFLT 

- Reproduction Procedure: 
In Google Chrome, load a html file whose charset is set to utf-8, which has a 
title tag with the following 3 characters consecutively: 
(an arbitrary multi-byte character \xe3\x81\x82),&#9996;(peace sign emoji \xe2\x9c\x8c),&#127995,&#65039;(white skin emoji \xf0\x9f\x8f\xbb\xef\xb8\x8f) 
Possibility of arbitrary code execution is unknown 

This could not be reproduced in Firefox 42.0, Safari 9.0.1 (9537.86.2.7.2) 
Also, this could not be reproduced in OS X Yosemite 

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: sorry, i have no details of those. 
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

 

Deleted: JVN07091981_files.zip 192 bytes

JVN07091981_files.zip 192 bytes Download