CVE-2016-1669

Description

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

References

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html

http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html

http://rhn.redhat.com/errata/RHSA-2016-1080.html

http://rhn.redhat.com/errata/RHSA-2017-0002.html

https://access.redhat.com/errata/RHSA-2017:0879

https://access.redhat.com/errata/RHSA-2017:0880

https://access.redhat.com/errata/RHSA-2017:0881

https://access.redhat.com/errata/RHSA-2017:0882

https://access.redhat.com/errata/RHSA-2018:0336

https://codereview.chromium.org/1945313002

https://crbug.com/606115

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/

https://security.gentoo.org/glsa/201605-02

http://www.debian.org/security/2016/dsa-3590

http://www.securitytracker.com/id/1035872

http://www.ubuntu.com/usn/USN-2960-1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3