CVE-2016-1663
14.05.2016, 21:59
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.Enginsight
| Vendor | Product | Version |
|---|---|---|
| opensuse | opensuse | 13.1 |
| redhat | enterprise_linux_desktop_supplementary | 6.0 |
| redhat | enterprise_linux_server_supplementary | 6.0 |
| redhat | enterprise_linux_server_supplementary_eus | 6.7z:z |
| redhat | enterprise_linux_workstation_supplementary | 6.0 |
| chrome | 𝑥 ≤ 50.0.2661.87 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||
| oxide-qt |
|
References