SecuritySpace - CVE-2015-5380

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-5380

Description: The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.

Test IDs: 1.3.6.1.4.1.25623.1.0.805944 1.3.6.1.4.1.25623.1.0.805943 1.3.6.1.4.1.25623.1.0.105358

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-5380
BugTraq ID: 75556
http://www.securityfocus.com/bid/75556

CVE ID:	CVE-2015-5380
Description:	The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.
Test IDs:	1.3.6.1.4.1.25623.1.0.805944 1.3.6.1.4.1.25623.1.0.805943 1.3.6.1.4.1.25623.1.0.105358
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5380 BugTraq ID: 75556 http://www.securityfocus.com/bid/75556