PT-2013-6066 · Google+2 · V8+3

Published 2013-12-04 · Updated 2024-06-15 · CVE-2013-6639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google V8 versions prior to 3.22.24.7 Google Chrome versions prior to 31.0.1650.63

Description The issue allows remote attackers to cause a denial of service or possibly have other impact via JavaScript code. This is due to an out-of-bounds write in the DehoistArrayIndex function.

Recommendations For Google V8 versions prior to 3.22.24.7, update to version 3.22.24.7 or later. For Google Chrome versions prior to 31.0.1650.63, update to version 31.0.1650.63 or later.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2013-1266

CVE-2013-6639

DSA-2811-1

MGASA-2013-0383

MGASA-2014-0007

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2014:1744

SUSE-SU-2019:14246-1

SUSE-SU-2019_14246-1

Affected Products

Alt Linux

Google Chrome

Suse

V8

References · 2854

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥❌ https://github.com/alidnf/CVE-2019-11730 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2015-05852 · Security Note
• https://bdu.fstec.ru/vul/2021-04379 · Security Note
• https://bdu.fstec.ru/vul/2020-00600 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0007 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00127 · Security Note
• https://bdu.fstec.ru/vul/2020-01398 · Security Note
• https://bdu.fstec.ru/vul/2020-00596 · Security Note
• https://bdu.fstec.ru/vul/2020-01399 · Security Note
• https://bdu.fstec.ru/vul/2021-00373 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6634 · Security Note
• https://bdu.fstec.ru/vul/2019-03329 · Security Note