PT-2019-13471 · Google+1 · Google Chrome+1

Publicado 2019-10-22 · Atualizado 2020-08-24 · CVE-2019-13765

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.70

Description A use-after-free issue in the content delivery manager allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Recommendations For versions prior to 78.0.3904.70, update to version 78.0.3904.70 or later to resolve the issue.

Correção

Use After Free

Improper Initialization

Memory Corruption

Enumeração de Fraquezas

CWE-416

CWE-665

CWE-787

Identificadores relacionados

ALT-PU-2019-3112

ALT-PU-2020-1050

ALT-PU-2020-1707

ALT-PU-2020-2441

CVE-2019-13765

DSA-4562-1

Produtos afetados

Alt Linux

Google Chrome

Referências · 10

• https://ubuntu.com/security/CVE-2019-13765 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4562-1 · Aviso do Fabricante
• https://crbug.com/1007194 · Nota
• https://security-tracker.debian.org/tracker/CVE-2019-13765 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13765 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-13765 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-13765 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-13765 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-13765 · Aviso do Fabricante