Google Chrome before 10.0.648.204 does not properly handle base strings which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors related to a \buffer error.\