PT-2016-3053 · Google+5 · Google Chrome+5
Phil Oester
·
Publicado
2016-11-01
·
Atualizado
2025-09-29
·
CVE-2016-5198
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 54.0.2840.90 for Linux
Google Chrome versions prior to 54.0.2840.85 for Android
Google Chrome versions prior to 54.0.2840.87 for Windows and Mac
Description
The issue is related to incorrect optimization assumptions in the V8 component of Google Chrome, which can be exploited by a remote attacker to perform arbitrary read/write operations, leading to code execution. This can be achieved via a crafted HTML page.
Recommendations
For Google Chrome versions prior to 54.0.2840.90 for Linux, update to version 54.0.2840.90 or later.
For Google Chrome versions prior to 54.0.2840.85 for Android, update to version 54.0.2840.85 or later.
For Google Chrome versions prior to 54.0.2840.87 for Windows and Mac, update to version 54.0.2840.87 or later.
As a temporary workaround, consider avoiding the use of specially crafted HTML pages until a patch is applied.
Exploit
Correção
Out of bounds Read
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu