CVE-2016-1669

V8: integer overflow leading to buffer overflow in Zone::New

Published May 14, 2016 CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed
Description
The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3590-1 chromium-browser security update
EUVD EUVD EUVD-2016-2764 The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
Ubuntu USN Ubuntu USN USN-2960-1 Oxide vulnerabilities
History

No history.