CVE-2010-0646 | BDVDB-2026-40363 Detail
Description#
Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56213
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222
- http://www.securityfocus.com/bid/38177
- http://code.google.com/p/v8/source/detail?r=3560
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
- http://securitytracker.com/id?1023583
- http://www.vupen.com/english/advisories/2010/0361
- http://code.google.com/p/chromium/issues/detail?id=31009
- http://www.osvdb.org/62316
- http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
- http://codereview.chromium.org/525064
- http://secunia.com/advisories/38545
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.