CVEvulnerability

CVE-2016-1669

8.8 HIGH Published 2016-05-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Affected configurations

• debian debian linux 8.0 • google chrome (<= 50.0.2661.87) • opensuse opensuse 13.1 • google v8 (<= 5.0.71) • nodejs node.js (>= 0.10.0 < 0.10.46) • nodejs node.js (>= 0.12.0 < 0.12.15) • nodejs node.js (>= 4.0.0 <= 4.1.2) • nodejs node.js (>= 4.2.0 < 4.4.6) • nodejs node.js (>= 5.0.0 < 5.12.0) • nodejs node.js (>= 6.0.0 <= 6.2.0) • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • canonical ubuntu linux 16.04

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References