CVEvulnerability
CVE-2010-0645
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Affected configurations
• google chrome (<= 4.0.249.78)
• google chrome 0.2.149.27
• google chrome 0.2.149.29
• google chrome 0.2.149.30
• google chrome 0.2.152.1
• google chrome 0.2.153.1
• google chrome 0.3.154.0
• google chrome 0.3.154.3
• google chrome 0.4.154.18
• google chrome 0.4.154.22
• google chrome 0.4.154.31
• google chrome 0.4.154.33
• google chrome 1.0.154.36
• google chrome 1.0.154.39
• google chrome 1.0.154.42
• google chrome 1.0.154.43
• google chrome 1.0.154.46
• google chrome 1.0.154.48
• google chrome 1.0.154.52
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 1.0.154.65
• google chrome 2.0.156.1
• google chrome 2.0.157.0
• google chrome 2.0.157.2
• google chrome 2.0.158.0
• google chrome 2.0.159.0
• google chrome 2.0.169.0
• google chrome 2.0.169.1
• google chrome 2.0.170.0
• google chrome 2.0.172
• google chrome 2.0.172.2
• google chrome 2.0.172.8
• google chrome 2.0.172.27
• google chrome 2.0.172.28
• google chrome 2.0.172.30
• google chrome 2.0.172.31
• google chrome 2.0.172.33
• google chrome 2.0.172.37
• google chrome 2.0.172.38
• google chrome 3.0.182.2
• google chrome 3.0.190.2
• google chrome 3.0.193.2
• google chrome 3.0.195.21
• google chrome 3.0.195.24
• google chrome 3.0.195.32
• google chrome 3.0.195.33
Related
Weakness · not in database (1)
References
- http://code.google.com/p/chromium/issues/detail?id=31009 code.google.com
- http://code.google.com/p/v8/source/detail?r=3560 code.google.com
- http://codereview.chromium.org/525064 codereview.chromium.org
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html Patch
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62316 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56213 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14508 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=31009 code.google.com
- http://code.google.com/p/v8/source/detail?r=3560 code.google.com
- http://codereview.chromium.org/525064 codereview.chromium.org
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html Patch
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62316 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56213 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14508 oval.cisecurity.org