جزئیات آسیب‌پذیری

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• https://crbug.com/808192 x_refsource_MISC
• https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html x_refsource_CONFIRM
• http://www.securityfocus.com/bid/103297 vdb-entryx_refsource_BID
• https://access.redhat.com/errata/RHSA-2018:0484 vendor-advisoryx_refsource_REDHAT
• https://www.exploit-db.com/exploits/44584/ exploitx_refsource_EXPLOIT-DB
• https://www.debian.org/security/2018/dsa-4182 vendor-advisoryx_refsource_DEBIAN
• https://www.zerodayinitiative.com/advisories/ZDI-19-367/ x_refsource_MISC
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6065 government-resource