cve/2015/CVE-2015-6764.md
2024-08-05 18:41:32 +00:00

25 lines
1.1 KiB
Markdown

### [CVE-2015-6764](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/allpaca/chrome-sbx-db
- https://github.com/lnick2023/nicenice
- https://github.com/otravidaahora2t/js-vuln-db
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/secmob/cansecwest2016
- https://github.com/tunz/js-vuln-db
- https://github.com/xbl3/awesome-cve-poc_qazbnm456