PT-2009-4957 · Google · V8+1

Publicado 2009-07-21 · Atualizado 2017-08-17 · CVE-2009-2555

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google V8 versions prior to 1.1.10.14 Google Chrome versions prior to 2.0.172.37

Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.

Recommendations For Google V8 versions prior to 1.1.10.14, update to version 1.1.10.14 or later. For Google Chrome versions prior to 2.0.172.37, update to version 2.0.172.37 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2555

Produtos afetados

Google Chrome

V8

Referências · 10

• http://vupen.com/english/advisories/2009/1924 · Aviso do Fabricante
• http://codereview.chromium.org/141042/diff/6/1004 · Nota
• http://securityfocus.com/bid/35722 · Nota
• http://codereview.chromium.org/141042 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2555 · Nota de Segurança
• http://osvdb.org/55939 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51801 · Nota
• http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html · Aviso do Fabricante
• http://secunia.com/advisories/35844 · Aviso do Fabricante
• http://code.google.com/p/chromium/issues/detail?id=14719 · Aviso do Fabricante