NetSight
IP …
high8.8

CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand cert…

Impact

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 8.0
GoogleChrome
through 50.0.2661.87
OpensuseOpensuse
Version 13.1
GoogleV8
through 5.0.71
NodejsNode.Js
from 0.10.0 before 0.10.46
from 0.12.0 before 0.12.15
from 4.0.0 through 4.1.2
from 4.2.0 before 4.4.6
from 5.0.0 before 5.12.0
from 6.0.0 through 6.2.0
CanonicalUbuntu Linux
Versions 14.04, 15.10, 16.04

Weakness classification

CWE-119

References