CVE-2010-0645 Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use o...
HighCVSS 9.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 4.0.249.78 | No fix listed |
| Google Chrome | = 0.2.149.27 | No fix listed |
| Google Chrome | = 0.2.149.29 | No fix listed |
| Google Chrome | = 0.2.149.30 | No fix listed |
| Google Chrome | = 0.2.152.1 | No fix listed |
| Google Chrome | = 0.2.153.1 | No fix listed |
| Google Chrome | = 0.3.154.0 | No fix listed |
| Google Chrome | = 0.3.154.3 | No fix listed |
| Google Chrome | = 0.4.154.18 | No fix listed |
| Google Chrome | = 0.4.154.22 | No fix listed |
| Google Chrome | = 0.4.154.31 | No fix listed |
| Google Chrome | = 0.4.154.33 | No fix listed |
| Google Chrome | = 1.0.154.36 | No fix listed |
| Google Chrome | = 1.0.154.39 | No fix listed |
| Google Chrome | = 1.0.154.42 | No fix listed |
| Google Chrome | = 1.0.154.43 | No fix listed |
| Google Chrome | = 1.0.154.46 | No fix listed |
| Google Chrome | = 1.0.154.48 | No fix listed |
| Google Chrome | = 1.0.154.52 | No fix listed |
| Google Chrome | = 1.0.154.53 | No fix listed |
| Google Chrome | = 1.0.154.59 | No fix listed |
| Google Chrome | = 1.0.154.65 | No fix listed |
| Google Chrome | = 2.0.156.1 | No fix listed |
| Google Chrome | = 2.0.157.0 | No fix listed |
| Google Chrome | = 2.0.157.2 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | = 2.0.158.0 | No fix listed |
| Google Chrome | = 2.0.159.0 | No fix listed |
| Google Chrome | = 2.0.169.0 | No fix listed |
| Google Chrome | = 2.0.169.1 | No fix listed |
| Google Chrome | = 2.0.170.0 | No fix listed |
| Google Chrome | = 2.0.172 | No fix listed |
| Google Chrome | = 2.0.172.2 | No fix listed |
| Google Chrome | = 2.0.172.8 | No fix listed |
| Google Chrome | = 2.0.172.27 | No fix listed |
| Google Chrome | = 2.0.172.28 | No fix listed |
| Google Chrome | = 2.0.172.30 | No fix listed |
| Google Chrome | = 2.0.172.31 | No fix listed |
| Google Chrome | = 2.0.172.33 | No fix listed |
| Google Chrome | = 2.0.172.37 | No fix listed |
| Google Chrome | = 2.0.172.38 | No fix listed |
| Google Chrome | = 3.0.182.2 | No fix listed |
| Google Chrome | = 3.0.190.2 | No fix listed |
| Google Chrome | = 3.0.193.2-beta | No fix listed |
| Google Chrome | = 3.0.195.21 | No fix listed |
| Google Chrome | = 3.0.195.24 | No fix listed |
| Google Chrome | = 3.0.195.32 | No fix listed |
| Google Chrome | = 3.0.195.33 | No fix listed |
References
- code.google.com
- code.google.com
- codereview.chromium.org
- googlechromereleases.blogspot.com patch
- 38545 third-party-advisory vendor-advisory
- 1023583 vdb-entry
- sites.google.com vendor-advisory
- 62316 vdb-entry
- 38177 vdb-entry
- ADV-2010-0361 vdb-entry vendor-advisory
- googlechrome-v8engine-code-exec(56213) vdb-entry
- oval:org.mitre.oval:def:14508 signature vdb-entry