Описание
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 74.0.3729.169-0ubuntu0.16.04.1 |
| cosmic | not-affected | 74.0.3729.169-0ubuntu0.16.04.1 |
| devel | not-affected | 74.0.3729.169-0ubuntu0.16.04.1 |
| disco | not-affected | 74.0.3729.169-0ubuntu0.16.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was ignored [no longer updated]] |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | trusty was ignored [no longer updated] |
| upstream | released | 63.0.3239.84-1 |
| xenial | not-affected | 74.0.3729.169-0ubuntu0.16.04.1 |
Показывать по
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Insufficient data validation in V8 builtins string generator could lea ...
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
6.8 Medium
CVSS2
8.8 High
CVSS3