Skip to content

CVE-2016-1669 The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remo...

HighCVSS 8.8 EPSS 4.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Affected products

ProductAffected versionsFixed in
debian/nodejs(Debian:12) < 4.4.6~dfsg-1 4.4.6~dfsg-1
debian/nodejs(Debian:13) < 4.4.6~dfsg-1 4.4.6~dfsg-1
debian/nodejs(Debian:14) < 4.4.6~dfsg-1 4.4.6~dfsg-1
debian linux = 8.0 No fix listed
Google Chrome <= 50.0.2661.87 No fix listed
opensuse = 13.1 No fix listed
Google v8 <= 5.0.71 No fix listed
nodejs node.js >= 0.10.0, < 0.10.46 0.10.46
nodejs node.js >= 0.12.0, < 0.12.15 0.12.15
nodejs node.js >= 4.0.0, <= 4.1.2 No fix listed
nodejs node.js >= 4.2.0, < 4.4.6 4.4.6
nodejs node.js >= 5.0.0, < 5.12.0 5.12.0
nodejs node.js >= 6.0.0, <= 6.2.0 No fix listed
Canonical Ubuntu Linux = 14.04 No fix listed
Canonical Ubuntu Linux = 15.10 No fix listed
Canonical Ubuntu Linux = 16.04 No fix listed

References