Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0645
HistoryFeb 18, 2010 - 12:00 a.m.

CVE-2010-0645

2010-02-1800:00:00
ubuntu.com
ubuntu.com
12

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.049

Percentile

92.8%

Multiple integer overflows in factory.cc in Google V8 before r3560, as used
in Google Chrome before 4.0.249.89, allow remote attackers to execute
arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

Bugs

Notes

Author Note
mdeslaur fixed in v8 r3560

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.049

Percentile

92.8%