PT-2013-6066 · Google+2 · V8+3

Publicado 2013-12-04 · Atualizado 2024-06-15 · CVE-2013-6639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google V8 versions prior to 3.22.24.7 Google Chrome versions prior to 31.0.1650.63

Description The issue allows remote attackers to cause a denial of service or possibly have other impact via JavaScript code. This is due to an out-of-bounds write in the DehoistArrayIndex function.

Recommendations For Google V8 versions prior to 3.22.24.7, update to version 3.22.24.7 or later. For Google Chrome versions prior to 31.0.1650.63, update to version 31.0.1650.63 or later.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2013-1266

CVE-2013-6639

DSA-2811-1

MGASA-2013-0383

MGASA-2014-0007

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2014:1744

SUSE-SU-2019:14246-1

SUSE-SU-2019_14246-1

Produtos afetados

Alt Linux

Google Chrome

Suse

V8

Referências · 2854

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥❌ https://github.com/alidnf/CVE-2019-11730 · Exploit, Deleted
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb · Nota
• https://github.com/libexpat/libexpat/issues/317 · Nota
• https://github.com/Tripwire/OpenSSL-CCS-Inject-Test · Nota
• https://suse.com/security/cve/CVE-2020-15974 · Nota
• https://suse.com/security/cve/CVE-2019-13742 · Nota
• https://suse.com/security/cve/CVE-2018-6106 · Nota
• https://suse.com/security/cve/CVE-2019-5799 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=1548306 · Nota
• https://suse.com/security/cve/CVE-2022-1497 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2015-1293 · Nota