NVD

Id
41565  
Name
CVE-2013-6638  
Description
Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-06  
Modified Date
2014-03-05  
Seq
2013-6638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210236 41565 CVE-2013-6638 http://code.google.com/p/v8/source/detail?r=17800  View
210237 41565 CVE-2013-6638 http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html  View
210238 41565 CVE-2013-6638 openSUSE-SU-2013:1927  View
210239 41565 CVE-2013-6638 openSUSE-SU-2013:1933  View
210240 41565 CVE-2013-6638 openSUSE-SU-2013:1960  View
210241 41565 CVE-2013-6638 openSUSE-SU-2013:1962  View
210242 41565 CVE-2013-6638 openSUSE-SU-2014:0065  View
210243 41565 CVE-2013-6638 openSUSE-SU-2014:0092  View
210244 41565 CVE-2013-6638 DSA-2811  View
210245 41565 CVE-2013-6638 [v8-dev] 20131115 Limit the size for typed arrays to MaxSmi. (issue 73943004)  View
210246 41565 CVE-2013-6638 1029442  View
210247 41565 CVE-2013-6638 https://code.google.com/p/chromium/issues/detail?id=319722  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23802 JVNDB-2013-005377 Google Chrome で使用される Google V8 の runtime.cc におけるバッファオーバーフローの脆弱性 Google Chrome で使用される Google V8 の runtime.cc には、(1) Runtime_TypedArrayInitialize および (2) Runtime_TypedArrayInitializeFromArrayLike 関数に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2013-6638 66580 CVE-2013-6638 41565 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005377.html 2013-12-04 2014-01-17 View