CVE-2009-2935

Loading...

General

Score:10.0/10.0
Severity:High
Category:Access Control Error

Impact Metrics

Confidentiality:Complete
Integrity:Complete
Availability:Complete

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:None

Published on 27/08/09 - Updated on 17/08/17

Description

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2009-2935
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2009-AVI-355

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
googlechrome

Share this vulnerability with:

Twitter Facebook LinkedIn Mail