PT-2018-3227 · Google+3 · Google Chrome+3

Nedwilliamson

·

Publicado

2018-04-26

·

Atualizado

2024-06-15

·

CVE-2018-6118

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.139
Description The issue is related to a double-eviction in the Incognito mode cache, leading to a user-after-free in the cache. This allows a remote attacker who has compromised the renderer process to execute arbitrary code via a crafted HTML page. The vulnerability is associated with the Media Cache component and involves the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted HTML page.
Recommendations For versions prior to 66.0.3359.139, update to version 66.0.3359.139 or later to resolve the issue.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2018-1959
BDU:2019-04388
CVE-2018-6118
DSA-4237-1
MGASA-2018-0268
OPENSUSE-SU-2018:1175-1
OPENSUSE-SU-2018:1437-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2018:1321
RHSA-2018_1321

Produtos afetados

Alt Linux
Google Chrome
Opera
Red Hat