| Title | Google Chrome の src/jsregexp.cc におけるヒープベースのバッファオーバーフローの脆弱性 |
|---|---|
| Summary | Google Chrome にて使用される Google V8 内の src/jsregexp.cc には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 |
| Possible impacts | 第三者により、巧妙に細工された JavaScript の正規表現を介して、Chrome のサンドボックス内にある任意のコードを実行される可能性があります。 |
| Solution | ベンダ情報及び参考情報を参照して適切な対策を実施してください。 |
| Publication Date | July 16, 2009, midnight |
| Registration Date | Oct. 19, 2010, 2:50 p.m. |
| Last Update | Oct. 19, 2010, 2:50 p.m. |
| CVSS2.0 : 危険 | |
| Score | 9.3 |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| Google Chrome 2.0.172.37 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2010年10月19日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression. |
|---|---|
| Summary | Desbordamiento de búfer basado en memoria dinámica en src/jsregexp.cc en Google V8 anterior a v1.1.10.14, como el utilizado en Google Chrome anterior a v2.0.172.37, permite a atacantes remotos ejecutar código de su elección en el Chrome sandbox a través de una expresión regular JavaScript manipulada. |
| Publication Date | July 22, 2009, 1:30 a.m. |
| Registration Date | Jan. 29, 2021, 1:21 p.m. |
| Last Update | April 23, 2026, 9:35 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:google:v8:*:*:*:*:*:*:*:* | 1.0 | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | 2.0.172.33 | ||||
| cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:* | |||||