299 matches found
Debian DSA-4289-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-16065 Brendon Tiszka discovered an out-of-bounds write issue in the v8 JavaScript library. - CVE-2018-16066 cloudfuzzer discovered an out-of-bounds read issue in blink/webkit. - CVE-2018-16067 Zhe Jin discovered ...
PT-2018-3184
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue is related to a use-after-free error in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved...
Google Chrome V8 International Components for Unicode Integer Overflow Vulnerability
Google Chrome is a web browser developed by Google.V8 is an open source JavaScript engine.International Components for Unicode ICU for C/C++ is a C/C++ library for Unicode support, software internationalization, and globalization. for C/C++. An integer overflow vulnerability exists in Google Chro...
Security Bulletin: IBM® SDK for Node.js™ in IBM Bluemix may be affected by CVE-2016-1669
Summary Buffer overflow in the Google V8 Javascript implementation used by IBM SDK for Node.js Vulnerability Details CVEID: CVE-2016-1669 DESCRIPTION: Google Chrome is vulnerable to a buffer overflow, caused by an error in V8. By persuading a victim to visit a specially-crafted Web site, a remote...
Security Bulletin: Multiple Vulnerabilities in Current Release of IBM® SDK for Node.js™
Summary Multiple vulnerabilities in OpenSSL disclosed on August 6, 2014 by the OpenSSL Project, plus a vulnerability in the V8 JavaScript engine Vulnerability Details CVE-ID: CVE-2014-3512 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an internal buffer overrun. A remote...
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™
Summary Node.js vulnerabilities in Node.js and the V8 Javascript engine were disclosed on October 18 2016, by the Node.js Foundation. IBM SDK for Node.js has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-5180 DESCRIPTION: The V8 Javascript engine, as used in Google Chrome O...
Google Chrome < 64.0.3282.167 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 64.0.3282.167. It is, therefore, affected by a vulnerability as referenced in the 201802stable-channel-update-for-desktop13 advisory. - Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prio...
Google Chrome < 64.0.3282.167 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 64.0.3282.167. It is, therefore, affected by a vulnerability as referenced in the 201802stable-channel-update-for-desktop13 advisory. - Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior ...
Google Chrome < 64.0.3282.140 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 64.0.3282.140. It is, therefore, affected by a vulnerability as referenced in the 201802stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
Debian DSA-4024-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium browser. - CVE-2017-15398 Ned Williamson discovered a stack overflow issue. - CVE-2017-15399 Zhao Qixun discovered a use-after-free issue in the v8 JavaScript library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[SECURITY] [DSA 4024-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4024-1 [email protected] https://www.debian.org/security/ Michael Gilbert November 08, 2017 https://www.debian.org/security/faq -...
Debian DSA-4020-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. In addition, this message serves as an annoucment that security support for chromium in the oldstable release jessie, Debian 8, is now discontinued. Debian 8 chromium users that desire continued security updates are strongl...
Browser security beyond sandboxing
Security is now a strong differentiator in picking the right browser. We all use browsers for day-to-day activities like staying in touch with loved ones, but also for editing sensitive private and corporate documents, and even managing our financial assets. A single compromise through a web...
Debian DSA-3985-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5111 Luat Nguyen discovered a use-after-free issue in the pdfium library. - CVE-2017-5112 Tobias Klein discovered a buffer overflow issue in the webgl library. - CVE-2017-5113 A buffer overflow issue was discover...
Google Chrome < 61.0.3163.100 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 61.0.3163.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 201709stable-channel-update-for-desktop21 advisory. - Inappropriate use of table size handling in V8 in Google Chrome prior to...
Debian Security Advisory DSA 3926-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...
PT-2017-3233
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Linux, Windows, and Mac Google Chrome version prior to 59.0.3071.92 for Android Opera versions prior to 59.0.3071.86 Description The issue is related to a type confusion in the V8 JavaScript...
Google Chrome 60.0.3080.5 V8 JavaScript Engine Out-Of-Bounds Write
// Source: https://halbecaf.com/2017/05/24/exploiting-a-v8-oob-write/ // // v8 exploit for https://crbug.com/716044 var oobrw = null; var leak = null; var arbrw = null; var code = function return 1; code; class BuggyArray extends Array constructorlen super1; oobrw = new Array1.1, 1.1; leak = new...
Google Chrome 60.0.3080.5 V8 JavaScript Engine - Out-of-Bounds Write
// Source: https://halbecaf.com/2017/05/24/exploiting-a-v8-oob-write/ // // v8 exploit for https://crbug.com/716044 var oobrw = null; var leak = null; var arbrw = null; var code = function return 1; code; class BuggyArray extends Array constructorlen super1; oobrw = new Array1.1, 1.1; leak = new...