CVE-2015-6771
HighSummary
In Google V8, used in Google Chrome before version 47.0.2526.73, there is an improper implementation of certain map and filter operations for arrays, which may lead to denial of service (out-of-bounds memory access) or possibly other unspecified impacts via crafted JavaScript code.
Risk Assessment
Remote attackers may exploit this vulnerability to cause denial of service, potentially affecting the availability of applications and systems using the browser.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor applications for unusual JavaScript-related activities.
Other vulnerabilities in Google V8 in Google Chrome
See all- CVE-2015-1304High
The object-observe.js file in Google V8, used in Google Chrome before version 45.0.2454.101, does not properly restrict method calls on access-checked objects. This allows remote attackers to bypass the Same Origin Policy via observe or getNotifier calls.
- CVE-2014-1716High
The XSS vulnerability in the Runtime_SetPrototype function in Google V8, used in Google Chrome before version 34.0.1847.116, allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
Original NVD description (English source)
js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.