PT-2018-2796 · Libraw+4 · Libraw+4
Publicado
2018-12-07
·
Atualizado
2024-06-15
·
CVE-2019-5800
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 73.0.3683.75
LibRaw (affected versions not specified)
Description
The issue is related to insufficient policy enforcement in Blink, allowing a remote attacker to bypass content security policy via a crafted HTML page. Additionally, there is a buffer overflow vulnerability in the LibRaw library, specifically in the
kodak ycbcr load raw function, which can lead to a denial of service when exploited by a remote attacker.Recommendations
For Google Chrome versions prior to 73.0.3683.75, update to version 73.0.3683.75 or later to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability in LibRaw.
Exploit
Correção
Buffer Overflow
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Libraw
Red Hat
Suse