Google Chrome V8 Object Allocation Size Integer Overflow

This strike exploits a vulnerability in the Google Chrome browser. Specifically, the vulnerability exists in the Google Chrome V8 javascript engine. By passing a prototype chain of objects with a large expected_nof_properties the instance_size value can be controlled. An integer overflow results in too small of a value being used causing memory corruption to occur. This may lead to a denial of service condition in the browser, or potentially remote code execution.