Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0646
HistoryFeb 18, 2010 - 12:00 a.m.

CVE-2010-0646

2010-02-1800:00:00
ubuntu.com
ubuntu.com
11

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.195

Percentile

96.3%

Multiple integer signedness errors in factory.cc in Google V8 before r3560,
as used in Google Chrome before 4.0.249.89, allow remote attackers to
execute arbitrary code in the Chrome sandbox via crafted use of JavaScript
arrays.

Bugs

Notes

Author Note
mdeslaur fixed in v8 r3560

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.195

Percentile

96.3%