Google Chrome 52.0.2743.116 Denial Of Service Vulnerability
8 Dec. 2016
Summary
Google Chrome is prone to a denial of service (DoS) vulnerability. This allow a remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources via certain vulnerable vectors.
Credit:
The original article can be found at: https://crbug.com/637963
The information has been provided by Max Justicz.
Vulnerable Systems:
* Google Chrome 52.0.2743.116
* Novell Leap 42.1
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have other impact via crafted JavaScript code that leverages certain side effects.
