CVE-2010-0646 Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via craft...
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 4.0.249.78 | No fix listed |
| Google Chrome | = 0.2.149.27 | No fix listed |
| Google Chrome | = 0.2.149.29 | No fix listed |
| Google Chrome | = 0.2.149.30 | No fix listed |
| Google Chrome | = 0.2.152.1 | No fix listed |
| Google Chrome | = 0.2.153.1 | No fix listed |
| Google Chrome | = 0.3.154.0 | No fix listed |
| Google Chrome | = 0.3.154.3 | No fix listed |
| Google Chrome | = 0.4.154.18 | No fix listed |
| Google Chrome | = 0.4.154.22 | No fix listed |
| Google Chrome | = 0.4.154.31 | No fix listed |
| Google Chrome | = 0.4.154.33 | No fix listed |
| Google Chrome | = 1.0.154.36 | No fix listed |
| Google Chrome | = 1.0.154.39 | No fix listed |
| Google Chrome | = 1.0.154.42 | No fix listed |
| Google Chrome | = 1.0.154.43 | No fix listed |
| Google Chrome | = 1.0.154.46 | No fix listed |
| Google Chrome | = 1.0.154.48 | No fix listed |
| Google Chrome | = 1.0.154.52 | No fix listed |
| Google Chrome | = 1.0.154.53 | No fix listed |
| Google Chrome | = 1.0.154.59 | No fix listed |
| Google Chrome | = 1.0.154.65 | No fix listed |
| Google Chrome | = 2.0.156.1 | No fix listed |
| Google Chrome | = 2.0.157.0 | No fix listed |
| Google Chrome | = 2.0.157.2 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | = 2.0.158.0 | No fix listed |
| Google Chrome | = 2.0.159.0 | No fix listed |
| Google Chrome | = 2.0.169.0 | No fix listed |
| Google Chrome | = 2.0.169.1 | No fix listed |
| Google Chrome | = 2.0.170.0 | No fix listed |
| Google Chrome | = 2.0.172 | No fix listed |
| Google Chrome | = 2.0.172.2 | No fix listed |
| Google Chrome | = 2.0.172.8 | No fix listed |
| Google Chrome | = 2.0.172.27 | No fix listed |
| Google Chrome | = 2.0.172.28 | No fix listed |
| Google Chrome | = 2.0.172.30 | No fix listed |
| Google Chrome | = 2.0.172.31 | No fix listed |
| Google Chrome | = 2.0.172.33 | No fix listed |
| Google Chrome | = 2.0.172.37 | No fix listed |
| Google Chrome | = 2.0.172.38 | No fix listed |
| Google Chrome | = 3.0.182.2 | No fix listed |
| Google Chrome | = 3.0.190.2 | No fix listed |
| Google Chrome | = 3.0.193.2-beta | No fix listed |
| Google Chrome | = 3.0.195.21 | No fix listed |
| Google Chrome | = 3.0.195.24 | No fix listed |
| Google Chrome | = 3.0.195.32 | No fix listed |
| Google Chrome | = 3.0.195.33 | No fix listed |
| Google Chrome | = 4.0.244.0 | No fix listed |
| Google Chrome | = 4.0.249.78-beta | No fix listed |
References
- code.google.com exploit
- code.google.com
- codereview.chromium.org patch
- googlechromereleases.blogspot.com
- 38545 third-party-advisory vendor-advisory
- 1023583 vdb-entry
- sites.google.com vendor-advisory
- 62316 vdb-entry
- 38177 vdb-entry
- ADV-2010-0361 patch vdb-entry vendor-advisory
- googlechrome-v8engine-code-exec(56213) vdb-entry
- oval:org.mitre.oval:def:14222 signature vdb-entry