medium6.8
CVE-2013-0836
Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause…
Impact
Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 24.0.1312.51 Versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0, 24.0.1274.0, 24.0.1275.0 | |
| V8 | through 3.14.5 Versions 1.0, 2.4.0, 2.4.1, 2.4.2, 2.4.3 | |
| Opensuse | Opensuse | Versions 12.1, 12.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html
- https://code.google.com/p/chromium/issues/detail?id=150545
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16459
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html
- https://code.google.com/p/chromium/issues/detail?id=150545
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16459