CVE-2018-6065

Google Chromium V8 Integer Overflow Vulnerability

Chrome

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

14. Nov 2018

Ausgewertete Quellen

• Chrome
  https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
• Debian
  https://www.debian.org/security/2018/dsa-4182
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:0484
• Hinweis
  http://www.securityfocus.com/bid/103297
• Hinweis
  https://www.exploit-db.com/exploits/44584/
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-19-367/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6065
• CISA
  Google Chromium V8 Integer Overflow Vulnerability
• NVD
  CVE-2018-6065