Denial of Service Vulnerability in Google Chrome Affecting Google V8 Engine
CVE-2016-1653

8.8HIGH

Key Information:

Vendor

Debian
Status
Debian Linux
Linux Enterprise
Leap
Vendor
CVE Published:
18 April 2016

What is CVE-2016-1653?

The LoadBuffer implementation in the Google V8 engine, utilized by Google Chrome prior to version 50.0.2661.75, improperly handles data types. This vulnerability allows attackers to execute specially crafted JavaScript code that can lead to an out-of-bounds write operation, potentially causing a denial of service or other unforeseen impacts. The issue is associated with specific files within the V8 compiler architecture.

References

http://lists.opensuse.org/opensuse-security-announce/2016...
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016...
vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0638.html
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.