PT-2018-3281 · Google+2 · Google Chrome+2

Rob Wu

·

Publicado

2018-04-17

·

Atualizado

2019-02-05

·

CVE-2018-6152

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117
Description The issue is related to the implementation of the Page.downloadBehavior backend in Google Chrome, which unconditionally marked downloaded files as safe, regardless of the file type. This could allow a remote attacker to convince a user to install a malicious extension using a specially crafted HTML page and user interaction, potentially leading to a sandbox escape.
Recommendations For Google Chrome versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later to resolve the issue.

Exploit

Correção

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

ALT-PU-2018-1639
ALT-PU-2018-2278
BDU:2019-04480
CVE-2018-6152
DSA-4256-1
MGASA-2018-0343
RHSA-2018:2282
RHSA-2018_2282

Produtos afetados

Alt Linux
Google Chrome
Red Hat