PT-2015-1100 · Google+4 · Google Chrome+5

Jakob

·

Publicado

2015-04-14

·

Atualizado

2025-09-29

·

CVE-2015-1242

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google V8 versions prior to 4.2.77.8 Google Chrome versions prior to 42.0.2311.90
Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization. This is due to a problem in the ReduceTransitionElementsKind function in hydrogen-check-elimination.cc.
Recommendations For Google V8 versions prior to 4.2.77.8, update to version 4.2.77.8 or later. For Google Chrome versions prior to 42.0.2311.90, update to version 42.0.2311.90 or later. As a temporary workaround, consider restricting the execution of crafted JavaScript code to minimize the risk of exploitation.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2015-1589
BDU:2015-09970
CVE-2015-1242
DSA-3238-1
MGASA-2015-0164
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0816
RHSA-2015_0816
USN-2570-1

Produtos afetados

Alt Linux
Google Chrome
Opera
Red Hat
Ubuntu
V8