Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56213 | vdb-entry x_refsource_XF |
| http://www.securityfocus.com/bid/38177 | vdb-entry x_refsource_BID |
| http://code.google.com/p/v8/source/detail?r=3560 | x_refsource_CONFIRM |
| http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs | x_refsource_CONFIRM |
| http://securitytracker.com/id?1023583 | vdb-entry x_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2010/0361 | vdb-entry x_refsource_VUPEN |
| http://code.google.com/p/chromium/issues/detail?id=31009 | x_refsource_CONFIRM |
| http://www.osvdb.org/62316 | vdb-entry x_refsource_OSVDB |
| http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html | x_refsource_CONFIRM |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14508 | vdb-entry signature x_refsource_OVAL |
| http://codereview.chromium.org/525064 | x_refsource_CONFIRM |
| http://secunia.com/advisories/38545 | third-party-advisory x_refsource_SECUNIA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |