Skip to main content

Special Announcement

  • 25 Jun 2024

    Announcement for Change of Chinese Name

    Please note that the Chinese name of HKCERT is changed from 「香港電腦保安事故協調中心」 to 「香港網絡安全事故協調中心」 with immediate effect.

    The English name, abbreviation, web address and email address remained unchanged.

Google Chrome v8 Engine Floating Point Memory Corruption Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 2 Oct 2009 4737 Views

RISK: Medium Risk

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the v8 engine when parsing strings into floating point numbers via the "dtoa()" implementation, which could allow remote attackers to crash an affected browser or execute arbitrary code inside the sandbox.


Impact

  • Remote Code Execution

System / Technologies affected

  • Google Chrome versions prior to 3.0.195.24

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link