Buffer overflow in Google Chrome - CVE-2016-1669

 

Buffer overflow in Google Chrome - CVE-2016-1669

Published: February 27, 2018 / Updated: April 3, 2018


Vulnerability identifier: #VU10733
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2016-1669
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Google
Affected software:
Google Chrome

Detailed vulnerability description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the zone.cc. A remote attacker can send specially crafted JavaScript code, trigger buffer overflow and cause the application to crash.

Successful exploitation of the vulnerability may result in system compromise.

How to mitigate CVE-2016-1669

Update to version 50.0.2661.102 (Google V8 5.0.71.47).

Sources