Published: 28/08/2018 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ prior to 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
icu-project international components for unicode

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser In addition, this message serves as an annoucment that security support for chromium in the oldstable release (jessie), Debian 8, is now discontinued Debian 8 chromium users that desire continued security updates are strongly encouraged to upgrade now to the current stable r ...

A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 602, as used in V8 in Google Chrome prior to 620320275 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page ...

A stack overflow has been found in the V8 component of the chromium browser < 620320275 ...

CWE-119 http://bugs.icu-project.org/trac/changeset/40494 https://access.redhat.com/errata/RHSA-2017:3082 https://crbug.com/770452 https://www.debian.org/security/2017/dsa-4020 http://www.securityfocus.com/bid/101597 https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html https://security.gentoo.org/glsa/201711-02 https://access.redhat.com/errata/RHSA-2017:3082 https://nvd.nist.gov https://www.debian.org/security/./dsa-4020

CVE-2017-15396

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect