Skip to main content

Google Chrome V8 Javascript Engine Memory Read Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 27 Aug 2009 4866 Views

RISK: Medium Risk

A vulnerability has been identified in Google Chrome, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an error in the V8 Javascript engine, which may allow a specially crafted web page to read unauthorized memory, bypassing security checks and leading to unauthorized data disclosure or arbitrary code execution.

An issue within the processing of certificates signed using MD2 or MD4 hashing algorithms has been reported.


Impact

  • Remote Code Execution

System / Technologies affected

  • Google Chrome versions prior to 2.0.172.43

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.



Vulnerability Identifier


Source


Related Link