PT-2016-1614 · Google+5 · Google V8+6
Camillo Bruni
+1
·
Publicado
2016-03-24
·
Atualizado
2025-09-29
·
CVE-2016-1646
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 49.0.2623.108
Description
The issue is related to the Array.prototype.concat implementation in builtins.cc in Google V8, which does not properly consider element data types. This allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code. The vulnerability can be exploited by a remote attacker to potentially gain confidential information and cause a denial of service on the affected system.
Recommendations
For Google Chrome versions prior to 49.0.2623.108, update to version 49.0.2623.108 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
Array.prototype.concat function in JavaScript code until a patch is applied. Additionally, avoid using crafted JavaScript code that could exploit this vulnerability.Exploit
Correção
DoS
Buffer Overflow
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Google V8
Opera
Red Hat
Suse
Ubuntu