VDB

CNVD-2015-02654

CNVD-2015-02654 PUBLISHED

Google Chrome是美国谷歌(Google)公司开发的一款Web浏览器。 Google Chrome 42.0.2311.90之前版本,components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc内的函数NaClSandbox::InitializeLayerTwoSandbox未能对NaCl进程进行RLIMIT_AS及RLIMIT_DATA限制,这可使远程攻击者在NaCl沙盒中运行构造的程序执行rowhammer攻击。

Timeline

  • Apr 19, 2015 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›