QwikSec

Security Database

CVE

CWE

Training

CVE-2015-6764

Published: Dec 6, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html

x_refsource_CONFIRM

https://code.google.com/p/chromium/issues/detail?id=554946

x_refsource_CONFIRM

openSUSE-SU-2016:0138

vendor-advisory

x_refsource_SUSE

https://chromium.googlesource.com/v8/v8/+/6df9a1db8c85ab63dee63879456b6027df53fabc

x_refsource_CONFIRM

openSUSE-SU-2015:2290

vendor-advisory

x_refsource_SUSE

https://codereview.chromium.org/1440223002

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_DEBIAN

vdb-entry

x_refsource_BID

openSUSE-SU-2015:2291

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.