CVE-2009-2935

Description

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/52902

http://www.vupen.com/english/advisories/2009/2420

http://www.securitytracker.com/id?1022773

http://www.securityfocus.com/bid/36149

http://secunia.com/advisories/36417

http://osvdb.org/57421

http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html

http://code.google.com/p/chromium/issues/detail?id=18639

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3