The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service (application crash) via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of a stack-overflow exception message.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 27, 2015 | Jul 22, 2015 |
| Suse | — | Upgrade chromiumUpgrade chromedriverUpgrade chromium-desktop-kdeUpgrade chromium-debugsourceUpgrade chromium-ffmpegsumo-debuginfoUpgrade chromedriver-debuginfoUpgrade chromium-desktop-gnomeUpgrade chromium-debuginfoUpgrade chromium-ffmpegsumo | Dec 18, 2015 | Jul 22, 2015 |
| Ubuntu | — | Upgrade liboxideqtcore0 | Nov 8, 2024 | Jul 23, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub