PT-2015-3960 · Google+4 · Google V8+5

Benedikt Meurer

·

Publicado

2015-01-21

·

Atualizado

2025-09-29

·

CVE-2014-7927

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91
Description The issue is related to the SimplifiedLowering::DoLoadBuffer function in Google V8, which does not properly choose an integer data type. This allows remote attackers to cause a denial of service, such as memory corruption, or possibly have other unspecified impacts via crafted JavaScript code.
Recommendations For versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later to resolve the issue. As a temporary workaround, consider restricting the execution of crafted JavaScript code until the update is applied.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2015-1098
CVE-2014-7927
MGASA-2015-0036
OPENSUSE-SU-2015_0441-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0093
RHSA-2015_0093
USN-2476-1

Produtos afetados

Alt Linux
Google Chrome
Google V8
Red Hat
Suse
Ubuntu