Podatność CVE-2016-1669


Publikacja: 2016-05-14

Opis:
The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Typ:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Ogólna skala CVSS
Znaczenie
Łatwość wykorzystania
9.3/10
10/10
8.6/10
Wymagany dostęp
Złożoność ataku
Autoryzacja
Zdalny
Średnia
Nie wymagana
Wpływ na poufność
Wpływ na integralność
Wpływ na dostępność
Pełny
Pełny
Pełny
Affected software
Opensuse -> Opensuse 
Novell -> Opensuse 
Google -> Chrome 
Google -> V8 
Debian -> Debian linux 

 Referencje:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html
http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html
http://rhn.redhat.com/errata/RHSA-2016-1080.html
http://rhn.redhat.com/errata/RHSA-2017-0002.html
http://www.debian.org/security/2016/dsa-3590
http://www.securityfocus.com/bid/90584
http://www.securitytracker.com/id/1035872
http://www.ubuntu.com/usn/USN-2960-1
https://access.redhat.com/errata/RHSA-2017:0879
https://access.redhat.com/errata/RHSA-2017:0880
https://access.redhat.com/errata/RHSA-2017:0881
https://access.redhat.com/errata/RHSA-2017:0882
https://access.redhat.com/errata/RHSA-2018:0336
https://codereview.chromium.org/1945313002
https://crbug.com/606115
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/
https://security.gentoo.org/glsa/201605-02

Copyright 2024, cxsecurity.com

 

Back to Top