PT-2018-2941 · Google+3 · Google Chrome+3

Publicado 2018-11-19 · Atualizado 2024-06-15 · CVE-2018-17479

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.110

Description The issue is related to incorrect object lifetime calculations in the GPU code, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using a specially crafted HTML page, allowing them to execute arbitrary code in the context of the current user or cause a denial of service.

Recommendations For Google Chrome versions prior to 70.0.3538.110, update to version 70.0.3538.110 or later to resolve the issue.

Exploit

Correção

Use After Free

Memory Corruption

Enumeração de Fraquezas

CWE-416

CWE-787

Identificadores relacionados

ALT-PU-2018-2879

BDU:2019-02689

CVE-2018-17479

DSA-4342-1

OPENSUSE-SU-2018_3871-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2018:3648

RHSA-2018_3648

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Suse

Referências · 2322

• 🔥 https://crbug.com/905336 · Exploit
• https://suse.com/security/cve/CVE-2021-21192 · Nota
• https://suse.com/security/cve/CVE-2023-0129 · Nota
• https://suse.com/security/cve/CVE-2022-3044 · Nota
• https://suse.com/security/cve/CVE-2018-6089 · Nota
• https://suse.com/security/cve/CVE-2022-1872 · Nota
• https://suse.com/security/cve/CVE-2015-1294 · Nota
• https://suse.com/security/cve/CVE-2019-5831 · Nota
• https://suse.com/security/cve/CVE-2011-3051 · Nota
• https://suse.com/security/cve/CVE-2021-21187 · Nota
• https://suse.com/security/cve/CVE-2021-21142 · Nota
• https://suse.com/security/cve/CVE-2013-0893 · Nota
• https://suse.com/security/cve/CVE-2017-5024 · Nota
• https://suse.com/security/cve/CVE-2022-3304 · Nota
• https://suse.com/security/cve/CVE-2016-5188 · Nota