CVE-2016-1669

HIGH

Description

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

References

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html

http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html

http://rhn.redhat.com/errata/RHSA-2016-1080.html

http://rhn.redhat.com/errata/RHSA-2017-0002.html

http://www.debian.org/security/2016/dsa-3590

http://www.securityfocus.com/bid/90584

http://www.securitytracker.com/id/1035872

http://www.ubuntu.com/usn/USN-2960-1

https://access.redhat.com/errata/RHSA-2017:0879

https://access.redhat.com/errata/RHSA-2017:0880

https://access.redhat.com/errata/RHSA-2017:0881

https://access.redhat.com/errata/RHSA-2017:0882

https://access.redhat.com/errata/RHSA-2018:0336

https://codereview.chromium.org/1945313002

https://crbug.com/606115

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541

https://lists.fedoraproject.org/archives/list/[email protected]/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/

https://lists.fedoraproject.org/archives/list/[email protected]/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/

https://security.gentoo.org/glsa/201605-02

Details

Source: MITRE

Published: 2016-05-14

Updated: 2018-10-30

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8.6

Severity: HIGH

CVSS v3.0

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH