Veracode Vulnerability DatabaseVERACODE:15748Denial Of Service (DoS)
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
V8 is vulnerable to denial of service. Untrusted JavaScript code executed by V8 could use either of these flaws to crash V8 or, possibly, execute arbitrary code with the privileges of the user running V8.
References
advisories.mageia.org/MGASA-2014-0516.html
googlechromereleases.blogspot.com/2014/03/stable-channel-update.html
secunia.com/advisories/61184
www-01.ibm.com/support/docview.wss?uid=swg21683389
www.debian.org/security/2014/dsa-2883
www.mandriva.com/security/advisories?name=MDVSA-2015:142
www.securityfocus.com/bid/65930
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1149781
code.google.com/p/chromium/issues/detail?id=343964
code.google.com/p/chromium/issues/detail?id=344186
code.google.com/p/chromium/issues/detail?id=347909
code.google.com/p/v8/source/detail?r=19475
code.google.com/p/v8/source/detail?r=19553
code.google.com/p/v8/source/detail?r=19599
rhn.redhat.com/errata/RHSA-2014-1744.html
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P