The regexp (aka regular expression) implementation in Google V8 prior to 5.0.71.40, as used in Google Chrome prior to 51.0.2704.63, mishandles external string sizes, which allows remote malicious users to cause a denial of service (out-of-bounds read) via crafted JavaScript code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
debian debian linux 8.0 |
||
canonical ubuntu linux 16.04 |
||
canonical ubuntu linux 15.10 |
||
redhat enterprise linux desktop 6.0 |
||
canonical ubuntu linux 14.04 |
||
redhat enterprise linux server 6.0 |
||
redhat enterprise linux workstation 6.0 |
||
suse linux enterprise 12.0 |
||
opensuse leap 42.1 |
||
opensuse opensuse 13.2 |
||
google chrome |
||
google v8 |