CVEvulnerability
CVE-2010-0646
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Affected configurations
• google chrome (<= 4.0.249.78)
• google chrome 0.2.149.27
• google chrome 0.2.149.29
• google chrome 0.2.149.30
• google chrome 0.2.152.1
• google chrome 0.2.153.1
• google chrome 0.3.154.0
• google chrome 0.3.154.3
• google chrome 0.4.154.18
• google chrome 0.4.154.22
• google chrome 0.4.154.31
• google chrome 0.4.154.33
• google chrome 1.0.154.36
• google chrome 1.0.154.39
• google chrome 1.0.154.42
• google chrome 1.0.154.43
• google chrome 1.0.154.46
• google chrome 1.0.154.48
• google chrome 1.0.154.52
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 1.0.154.65
• google chrome 2.0.156.1
• google chrome 2.0.157.0
• google chrome 2.0.157.2
• google chrome 2.0.158.0
• google chrome 2.0.159.0
• google chrome 2.0.169.0
• google chrome 2.0.169.1
• google chrome 2.0.170.0
• google chrome 2.0.172
• google chrome 2.0.172.2
• google chrome 2.0.172.8
• google chrome 2.0.172.27
• google chrome 2.0.172.28
• google chrome 2.0.172.30
• google chrome 2.0.172.31
• google chrome 2.0.172.33
• google chrome 2.0.172.37
• google chrome 2.0.172.38
• google chrome 3.0.182.2
• google chrome 3.0.190.2
• google chrome 3.0.193.2
• google chrome 3.0.195.21
• google chrome 3.0.195.24
• google chrome 3.0.195.32
• google chrome 3.0.195.33
• google chrome 4.0.244.0
• google chrome 4.0.249.78
Related
Weakness · not in database (1)
References
- http://code.google.com/p/chromium/issues/detail?id=31009 Exploit
- http://code.google.com/p/v8/source/detail?r=3560 code.google.com
- http://codereview.chromium.org/525064 Patch
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html googlechromereleases.blogspot.com
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62316 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56213 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=31009 Exploit
- http://code.google.com/p/v8/source/detail?r=3560 code.google.com
- http://codereview.chromium.org/525064 Patch
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html googlechromereleases.blogspot.com
- http://secunia.com/advisories/38545 Vendor Advisory
- http://securitytracker.com/id?1023583 securitytracker.com
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Vendor Advisory
- http://www.osvdb.org/62316 www.osvdb.org
- http://www.securityfocus.com/bid/38177 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0361 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56213 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222 oval.cisecurity.org