Google V8 Out of Bounds Write 'Array.prototype.map' Builtin Denial of Service Vulnerability

Bugtraq ID:	98732
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 26 2017 12:00AM
Updated:	May 26 2017 12:00AM
Credit:	halbecaf
Vulnerable:	Google V8 0 Google Chrome 60.0.3080.5
Not Vulnerable:

Google V8 Out of Bounds Write 'Array.prototype.map' Builtin Denial of Service Vulnerability

Google V8 is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to cause a denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.

Google V8 Out of Bounds Write 'Array.prototype.map' Builtin Denial of Service Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Google V8 Out of Bounds Write 'Array.prototype.map' Builtin Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google V8 Out of Bounds Write 'Array.prototype.map' Builtin Denial of Service Vulnerability

References:

• V8: OOB write in Array.prototype.map builtin (chromium.org)
  
• Chrome V8 (Google)
  
• Exploiting a V8 OOB write. (halbecaf)
  
• Google Chrome Homepage (Google)