CVE-2009-2555: Buffer Overflow
Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2555?
CVE-2009-2555 has a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2009-2555?
To fix CVE-2009-2555, update Google V8 to version 1.1.10.14 or later and Google Chrome to version 2.0.172.37 or later.
What causes CVE-2009-2555?
CVE-2009-2555 is caused by a heap-based buffer overflow in the JavaScript regular expression handling in Google V8.
What are the potential impacts of CVE-2009-2555?
The exploitation of CVE-2009-2555 could allow attackers to execute arbitrary code within the Chrome sandbox.
Which versions of Google software are affected by CVE-2009-2555?
CVE-2009-2555 affects Google V8 versions prior to 1.1.10.14 and several versions of Google Chrome up to 2.0.172.33.