CVE-2016-5172 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted Jav...
MediumCVSS 6.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 53.0.2785.101 | No fix listed |
| nodejs node.js | >= 6.0.0, <= 6.8.1 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- RHSA-2016:1905 vendor-advisory
- DSA-3667 vendor-advisory
- 92942 vdb-entry
- 1036826 vdb-entry
- codereview.chromium.org
- crbug.com
- googlechromereleases.blogspot.com
- GLSA-201610-09 vendor-advisory