Google V8 CVE-2017-15396 Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	101597
Class:	Boundary Condition Error
CVE:	CVE-2017-15396
Remote:	Yes
Local:	No
Published:	Oct 26 2017 12:00AM
Updated:	Dec 19 2017 08:00PM
Credit:	Yu Zhou of Ant-financial Light-Year Security Lab
Vulnerable:	Google V8 0 Google Chrome 6.0.472 55 Google Chrome 2.0.172 .33 Google Chrome 0.2.149 .29 Google Chrome 9.0.597.92 Google Chrome 9.0.597.9 Google Chrome 9.0.597.79 Google Chrome 9.0.597.66 Google Chrome 9.0.597.58 Google Chrome 9.0.597.57 Google Chrome 9.0.597.41 Google Chrome 9.0.597.37 Google Chrome 9.0.597.31 Google Chrome 9.0.597.12 Google Chrome 9.0.597.11 Google Chrome 9.0.581.0 Google Chrome 9.0.578.0 Google Chrome 9.0.576.0 Google Chrome 8.0.560.0 Google Chrome 8.0.552.48 Google Chrome 8.0.552.41 Google Chrome 8.0.552.323 Google Chrome 8.0.552.312 Google Chrome 8.0.552.310 Google Chrome 8.0.552.224 Google Chrome 8.0.552.17 Google Chrome 8.0.552.13 Google Chrome 8.0.552.103 Google Chrome 8.0.552.100 Google Chrome 8.0.552.1 Google Chrome 8.0.551.1 Google Chrome 7.0.544.0 Google Chrome 7.0.537.0 Google Chrome 7.0.536.1 Google Chrome 7.0.531.2 Google Chrome 7.0.528.0 Google Chrome 7.0.524.0 Google Chrome 7.0.522.0 Google Chrome 7.0.517.7 Google Chrome 7.0.517.2 Google Chrome 7.0.517.12 Google Chrome 7.0.516.0 Google Chrome 7.0.512.0 Google Chrome 7.0.511.2 Google Chrome 7.0.507.1 Google Chrome 7.0.500.1 Google Chrome 7.0.499.1 Google Chrome 60.0.3112.80 Google Chrome 60.0.3112.78 Google Chrome 60.0.3080.5 Google Chrome 6.0.496.0 Google Chrome 6.0.472.58 Google Chrome 6.0.472.39 Google Chrome 6.0.472.3 Google Chrome 6.0.472.18 Google Chrome 6.0.472.0 Google Chrome 6.0.466.4 Google Chrome 6.0.466.2 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.421.0 Google Chrome 6.0.418.6 Google Chrome 6.0.412.0 Google Chrome 6.0.398.0 Google Chrome 59.0.3071.115 Google Chrome 53.0.2785.89 Google Chrome 50.0.2661.102 Google Chrome 5.0.391.0 Google Chrome 5.0.378.0 Google Chrome 5.0.375.68 Google Chrome 5.0.375.67 Google Chrome 5.0.375.57 Google Chrome 5.0.375.41 Google Chrome 5.0.375.27 Google Chrome 5.0.375.12 Google Chrome 5.0.368.0 Google Chrome 5.0.366.0 Google Chrome 5.0.360.5 Google Chrome 5.0.360.4 Google Chrome 5.0.360.3 Google Chrome 5.0.360.0 Google Chrome 5.0.342.9 Google Chrome 5.0.336.0 Google Chrome 5.0.335.4 Google Chrome 5.0.334.0 Google Chrome 5.0.323.0 Google Chrome 5.0.317.1 Google Chrome 5.0.307.8 Google Chrome 48.0.2564.116 Google Chrome 4.1.249.1055 Google Chrome 4.1.249.1050 Google Chrome 4.1.249.1031 Google Chrome 4.1.249.1025 Google Chrome 4.1.249.1014 Google Chrome 4.1.249.1004 Google Chrome 4.0.305.0 Google Chrome 4.0.302.0 Google Chrome 4.0.288.0 Google Chrome 4.0.275.1 Google Chrome 4.0.275.0 Google Chrome 4.0.212.1 Google Chrome 4.0.212.0 Google Chrome 38.0.2125.122 Google Chrome 37.0.2062.70 Google Chrome 37.0.2062.50 Google Chrome 37.0.2062.49 Google Chrome 37.0.2062.45 Google Chrome 35.0.1916.9 Google Chrome 35.0.1916.153 Google Chrome 35.0.1916.10 Google Chrome 34.0.1847.97 Google Chrome 34.0.1847.60 Google Chrome 34.0.1847.51 Google Chrome 34.0.1847.46 Google Chrome 34.0.1847.25 Google Chrome 34.0.1847.101 Google Chrome 33.0.1750.85 Google Chrome 33.0.1750.82 Google Chrome 33.0.1750.80 Google Chrome 33.0.1750.76 Google Chrome 33.0.1750.62 Google Chrome 33.0.1750.59 Google Chrome 33.0.1750.44 Google Chrome 33.0.1750.35 Google Chrome 33.0.1750.154 Google Chrome 33.0.1750.14 Google Chrome 33.0.1750.11 Google Chrome 32.0.1700.97 Google Chrome 32.0.1700.58 Google Chrome 32.0.1700.31 Google Chrome 32.0.1700.26 Google Chrome 32.0.1700.21 Google Chrome 32.0.1686.0 Google Chrome 32.0.1683.1 Google Chrome 32.0.1681.3 Google Chrome 32.0.1675.0 Google Chrome 32.0.1669.3 Google Chrome 32.0.1667.0 Google Chrome 32.0.1663.3 Google Chrome 32.0.1660.1 Google Chrome 31.0.1650.47 Google Chrome 31.0.1650.37 Google Chrome 31.0.1650.27 Google Chrome 31.0.1650.17 Google Chrome 31.0.1650.15 Google Chrome 30.0.1599.57 Google Chrome 30.0.1599.48 Google Chrome 30.0.1599.37 Google Chrome 30.0.1599.33 Google Chrome 30.0.1599.2 Google Chrome 3.0.195.27 Google Chrome 29.0.1547.76 Google Chrome 29.0.1547.53 Google Chrome 29.0.1547.23 Google Chrome 28.0.1500.95 Google Chrome 28.0.1500.9 Google Chrome 28.0.1500.53 Google Chrome 28.0.1500.49 Google Chrome 28.0.1500.29 Google Chrome 28.0.1500.20 Google Chrome 27.0.1453.89 Google Chrome 27.0.1453.76 Google Chrome 27.0.1453.74 Google Chrome 27.0.1453.47 Google Chrome 27.0.1453.41 Google Chrome 27.0.1453.40 Google Chrome 27.0.1453.4 Google Chrome 27.0.1453.3 Google Chrome 27.0.1453.116 Google Chrome 25.0.1364.97 Google Chrome 25.0.1364.93 Google Chrome 25.0.1364.88 Google Chrome 25.0.1364.85 Google Chrome 25.0.1364.79 Google Chrome 25.0.1364.78 Google Chrome 25.0.1364.54 Google Chrome 25.0.1364.21 Google Chrome 25.0.1364.125 Google Chrome 24.0.1312.9 Google Chrome 24.0.1312.8 Google Chrome 24.0.1312.70 Google Chrome 24.0.1312.7 Google Chrome 24.0.1312.6 Google Chrome 24.0.1312.57 Google Chrome 24.0.1312.56 Google Chrome 24.0.1312.55 Google Chrome 24.0.1312.54 Google Chrome 24.0.1312.53 Google Chrome 24.0.1312.52 Google Chrome 24.0.1312.51 Google Chrome 24.0.1312.50 Google Chrome 24.0.1312.5 Google Chrome 24.0.1312.49 Google Chrome 24.0.1312.48 Google Chrome 24.0.1312.47 Google Chrome 24.0.1312.46 Google Chrome 24.0.1312.45 Google Chrome 24.0.1312.44 Google Chrome 24.0.1312.43 Google Chrome 24.0.1312.42 Google Chrome 24.0.1312.41 Google Chrome 24.0.1312.40 Google Chrome 24.0.1312.4 Google Chrome 24.0.1312.39 Google Chrome 24.0.1312.38 Google Chrome 24.0.1312.37 Google Chrome 24.0.1312.36 Google Chrome 24.0.1312.35 Google Chrome 24.0.1312.34 Google Chrome 24.0.1312.33 Google Chrome 24.0.1312.32 Google Chrome 24.0.1312.31 Google Chrome 24.0.1312.30 Google Chrome 24.0.1312.29 Google Chrome 24.0.1312.28 Google Chrome 24.0.1312.27 Google Chrome 24.0.1312.26 Google Chrome 24.0.1312.25 Google Chrome 24.0.1312.24 Google Chrome 24.0.1312.23 Google Chrome 24.0.1312.22 Google Chrome 24.0.1312.21 Google Chrome 24.0.1312.20 Google Chrome 24.0.1312.19 Google Chrome 24.0.1312.18 Google Chrome 24.0.1312.17 Google Chrome 24.0.1312.16 Google Chrome 24.0.1312.15 Google Chrome 24.0.1312.14 Google Chrome 24.0.1312.13 Google Chrome 24.0.1312.12 Google Chrome 24.0.1312.11 Google Chrome 24.0.1312.10 Google Chrome 24.0.1312.1 Google Chrome 24.0.1312.0 Google Chrome 24.0.1304.1 Google Chrome 24.0.1289.1 Google Chrome 24.0.1284.1 Google Chrome 24.0.1272.1 Google Chrome 23.0.1271.88 Google Chrome 23.0.1271.52 Google Chrome 23.0.1271.51 Google Chrome 23.0.1271.39 Google Chrome 23.0.1271.30 Google Chrome 23.0.1271.26 Google Chrome 23.0.1271.24 Google Chrome 23.0.1271.18 Google Chrome 23.0.1271.13 Google Chrome 22.0.1229.67 Google Chrome 22.0.1229.50 Google Chrome 22.0.1229.39 Google Chrome 22.0.1229.18 Google Chrome 22 Google Chrome 21.0.1180.84 Google Chrome 21.0.1180.79 Google Chrome 21.0.1180.62 Google Chrome 21.0.1180.61 Google Chrome 21.0.1180.60 Google Chrome 21.0.1180.57 Google Chrome 21.0.1180.52 Google Chrome 21.0.1180.41 Google Chrome 21.0.1180.39 Google Chrome 21.0.1180.34 Google Chrome 21.0.1180.31 Google Chrome 20.0.1132.9 Google Chrome 20.0.1132.8 Google Chrome 20.0.1132.7 Google Chrome 20.0.1132.54 Google Chrome 20.0.1132.37 Google Chrome 20.0.1132.29 Google Chrome 20.0.1132.26 Google Chrome 20.0.1132.25 Google Chrome 20.0.1132.24 Google Chrome 20.0.1132.22 Google Chrome 20.0.1132.21 Google Chrome 20.0.1132.19 Google Chrome 20.0.1132.14 Google Chrome 20.0.1132.13 Google Chrome 20.0.1132.11 Google Chrome 20.0.1132.10 Google Chrome 2.0.169.1 Google Chrome 2.0.156.1 Google Chrome 19.0.1084.50 Google Chrome 19.0.1084.48 Google Chrome 19.0.1084.42 Google Chrome 19.0.1084.32 Google Chrome 19.0.1084.26 Google Chrome 19.0.1084.16 Google Chrome 19.0.1084.13 Google Chrome 19.0.1084.1 Google Chrome 19.0.1079.0 Google Chrome 19.0.1072.0 Google Chrome 19.0.1071.0 Google Chrome 19.0.1065.0 Google Chrome 19.0.1060.1 Google Chrome 19.0.1060.0 Google Chrome 19.0.1041.0 Google Chrome 18.0.1025.56 Google Chrome 18.0.1025.54 Google Chrome 18.0.1025.5 Google Chrome 18.0.1025.44 Google Chrome 18.0.1025.40 Google Chrome 18.0.1025.147 Google Chrome 18.0.1025.146 Google Chrome 18.0.1025.116 Google Chrome 18.0.1025.10 Google Chrome 18.0.1021.0 Google Chrome 18.0.1017.1 Google Chrome 18.0.1012.2 Google Chrome 18.0.1012.1 Google Chrome 18.0.1012.0 Google Chrome 18.0.1010.1 Google Chrome 18.0.1005.0 Google Chrome 18.0.1004.0 Google Chrome 17.0.963.84 Google Chrome 17.0.963.80 Google Chrome 17.0.963.54 Google Chrome 17.0.963.50 Google Chrome 17.0.963.46 Google Chrome 17.0.963.41 Google Chrome 17.0.963.26 Google Chrome 17.0.963.24 Google Chrome 17.0.963.21 Google Chrome 17.0.963.17 Google Chrome 17.0.963.1 Google Chrome 17.0.960.0 Google Chrome 17.0.945.0 Google Chrome 17.0.939.0 Google Chrome 16.0.912.9 Google Chrome 16.0.912.8 Google Chrome 16.0.912.77 Google Chrome 16.0.912.76 Google Chrome 16.0.912.75 Google Chrome 16.0.912.74 Google Chrome 16.0.912.7 Google Chrome 16.0.912.66 Google Chrome 16.0.912.63 Google Chrome 16.0.912.62 Google Chrome 16.0.912.6 Google Chrome 16.0.912.5 Google Chrome 16.0.912.43 Google Chrome 16.0.912.42 Google Chrome 16.0.912.41 Google Chrome 16.0.912.40 Google Chrome 16.0.912.4 Google Chrome 16.0.912.39 Google Chrome 16.0.912.38 Google Chrome 16.0.912.37 Google Chrome 16.0.912.36 Google Chrome 16.0.912.35 Google Chrome 16.0.912.34 Google Chrome 16.0.912.33 Google Chrome 16.0.912.32 Google Chrome 16.0.912.31 Google Chrome 16.0.912.30 Google Chrome 16.0.912.3 Google Chrome 16.0.912.29 Google Chrome 16.0.912.28 Google Chrome 16.0.912.27 Google Chrome 16.0.912.26 Google Chrome 16.0.912.25 Google Chrome 16.0.912.24 Google Chrome 16.0.912.23 Google Chrome 16.0.912.22 Google Chrome 16.0.912.21 Google Chrome 16.0.912.20 Google Chrome 16.0.912.2 Google Chrome 16.0.912.19 Google Chrome 16.0.912.15 Google Chrome 16.0.912.14 Google Chrome 16.0.912.13 Google Chrome 16.0.912.12 Google Chrome 16.0.912.11 Google Chrome 16.0.912.10 Google Chrome 16.0.912.1 Google Chrome 16.0.912.0 Google Chrome 16.0.910.0 Google Chrome 16.0.902.0 Google Chrome 16.0.891.1 Google Chrome 16.0.890.0 Google Chrome 16.0.881.0 Google Chrome 16.0.878.0 Google Chrome 15.0.874.5 Google Chrome 15.0.874.2 Google Chrome 15.0.874.16 Google Chrome 15.0.871.0 Google Chrome 15.0.868.1 Google Chrome 15.0.867.0 Google Chrome 15.0.862.0 Google Chrome 15.0.861.0 Google Chrome 15.0.860.0 Google Chrome 14.0.836.0 Google Chrome 14.0.835.8 Google Chrome 14.0.835.34 Google Chrome 14.0.835.31 Google Chrome 14.0.835.28 Google Chrome 14.0.835.203 Google Chrome 14.0.835.2 Google Chrome 14.0.835.127 Google Chrome 14.0.835.120 Google Chrome 14.0.835.111 Google Chrome 14.0.835.104 Google Chrome 14.0.823.0 Google Chrome 14.0.812.0 Google Chrome 14.0.809.0 Google Chrome 14.0.806.0 Google Chrome 14.0.792.0 Google Chrome 14.0.786.0 Google Chrome 13.0.782.92 Google Chrome 13.0.782.25 Google Chrome 13.0.782.24 Google Chrome 13.0.782.23 Google Chrome 13.0.782.214 Google Chrome 13.0.782.14 Google Chrome 13.0.782.108 Google Chrome 13.0.777.4 Google Chrome 13.0.776.1 Google Chrome 13.0.775.2 Google Chrome 13.0.760.0 Google Chrome 13.0.757.0 Google Chrome 12.0.747.0 Google Chrome 12.0.746.0 Google Chrome 12.0.745.0 Google Chrome 12.0.744.0 Google Chrome 12.0.743.0 Google Chrome 12.0.742.94 Google Chrome 12.0.742.93 Google Chrome 12.0.742.92 Google Chrome 12.0.742.91 Google Chrome 12.0.742.9 Google Chrome 12.0.742.82 Google Chrome 12.0.742.8 Google Chrome 12.0.742.77 Google Chrome 12.0.742.75 Google Chrome 12.0.742.74 Google Chrome 12.0.742.73 Google Chrome 12.0.742.72 Google Chrome 12.0.742.71 Google Chrome 12.0.742.70 Google Chrome 12.0.742.69 Google Chrome 12.0.742.68 Google Chrome 12.0.742.67 Google Chrome 12.0.742.66 Google Chrome 12.0.742.65 Google Chrome 12.0.742.64 Google Chrome 12.0.742.63 Google Chrome 12.0.742.61 Google Chrome 12.0.742.60 Google Chrome 12.0.742.6 Google Chrome 12.0.742.59 Google Chrome 12.0.742.58 Google Chrome 12.0.742.57 Google Chrome 12.0.742.56 Google Chrome 12.0.742.55 Google Chrome 12.0.742.54 Google Chrome 12.0.742.53 Google Chrome 12.0.742.52 Google Chrome 12.0.742.51 Google Chrome 12.0.742.50 Google Chrome 12.0.742.5 Google Chrome 12.0.742.49 Google Chrome 12.0.742.48 Google Chrome 12.0.742.47 Google Chrome 12.0.742.46 Google Chrome 12.0.742.45 Google Chrome 12.0.742.44 Google Chrome 12.0.742.43 Google Chrome 12.0.742.42 Google Chrome 12.0.742.41 Google Chrome 12.0.742.4 Google Chrome 12.0.742.30 Google Chrome 12.0.742.3 Google Chrome 12.0.742.22 Google Chrome 12.0.742.21 Google Chrome 12.0.742.20 Google Chrome 12.0.742.2 Google Chrome 12.0.742.19 Google Chrome 12.0.742.18 Google Chrome 12.0.742.17 Google Chrome 12.0.742.16 Google Chrome 12.0.742.15 Google Chrome 12.0.742.14 Google Chrome 12.0.742.13 Google Chrome 12.0.742.124 Google Chrome 12.0.742.123 Google Chrome 12.0.742.122 Google Chrome 12.0.742.121 Google Chrome 12.0.742.120 Google Chrome 12.0.742.12 Google Chrome 12.0.742.115 Google Chrome 12.0.742.114 Google Chrome 12.0.742.113 Google Chrome 12.0.742.112 Google Chrome 12.0.742.111 Google Chrome 12.0.742.11 Google Chrome 12.0.742.105 Google Chrome 12.0.742.100 Google Chrome 12.0.742.10 Google Chrome 12.0.742.1 Google Chrome 12.0.742.0 Google Chrome 12.0.741.0 Google Chrome 12.0.740.0 Google Chrome 12.0.739.0 Google Chrome 12.0.738.0 Google Chrome 12.0.737.0 Google Chrome 12.0.736.0 Google Chrome 12.0.735.0 Google Chrome 12.0.734.0 Google Chrome 12.0.733.0 Google Chrome 12.0.732.0 Google Chrome 12.0.731.0 Google Chrome 12.0.730.0 Google Chrome 12.0.729.0 Google Chrome 12.0.728.0 Google Chrome 12.0.727.0 Google Chrome 12.0.726.0 Google Chrome 12.0.725.0 Google Chrome 12.0.724.0 Google Chrome 12.0.723.1 Google Chrome 12.0.723.0 Google Chrome 12.0.722.0 Google Chrome 12.0.721.1 Google Chrome 12.0.721.0 Google Chrome 12.0.720.0 Google Chrome 12.0.719.1 Google Chrome 12.0.719.0 Google Chrome 12.0.718.0 Google Chrome 12.0.717.0 Google Chrome 12.0.716.0 Google Chrome 12.0.715.0 Google Chrome 12.0.714.0 Google Chrome 12.0.713.0 Google Chrome 12.0.712.0 Google Chrome 12.0.711.0 Google Chrome 12.0.710.0 Google Chrome 12.0.709.0 Google Chrome 12.0.708.0 Google Chrome 12.0.707.0 Google Chrome 12.0.706.0 Google Chrome 12.0.705.0 Google Chrome 12.0.704.0 Google Chrome 12.0.703.0 Google Chrome 12.0.702.2 Google Chrome 12.0.702.1 Google Chrome 12.0.702.0 Google Chrome 12.0.701.0 Google Chrome 12.0.700.0 Google Chrome 11.0.697.0 Google Chrome 11.0.696.8 Google Chrome 11.0.696.61 Google Chrome 11.0.696.33 Google Chrome 11.0.696.2 Google Chrome 11.0.696.11 Google Chrome 11.0.690.0 Google Chrome 11.0.678.0 Google Chrome 11.0.670.0 Google Chrome 11.0.669.0 Google Chrome 11.0.668.0 Google Chrome 11.0.665.0 Google Chrome 11.0.662.0 Google Chrome 11.0.660.0 Google Chrome 11.0.654.0 Google Chrome 10.0.651.0 Google Chrome 10.0.648.90 Google Chrome 10.0.648.2 Google Chrome 10.0.648.132 Google Chrome 10.0.648.130 Google Chrome 10.0.648.125 Google Chrome 10.0.648.114 Google Chrome 10.0.645.0 Google Chrome 10.0.636.0 Google Chrome 10.0.635.0 Google Chrome 10.0.630.0 Google Chrome 10.0.616.0 Google Chrome 10.0.615.0 Google Chrome 10.0.614.0 Google Chrome 10.0.612.3 Google Chrome 10.0.612.2 Google Chrome 10.0.612.1 Google Chrome 10.0.612.0 Google Chrome 10.0.609.0 Google Chrome 1.0.154.48
Not Vulnerable:	Google Chrome 62.0.3202.75

Google V8 CVE-2017-15396 Stack Based Buffer Overflow Vulnerability

Google V8 is prone to a stack-based buffer overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Google V8 CVE-2017-15396 Stack Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google V8 CVE-2017-15396 Stack Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google V8 CVE-2017-15396 Stack Based Buffer Overflow Vulnerability

References:

• Google Chrome Homepage (Google)
  
• Stable Channel Update for Desktop updated to 62.0.3202.75 (Google)