PT-2019-1907 · Google+5 · Skia+6
Ivan Fratric
·
Publicado
2019-01-29
·
Atualizado
2024-12-12
·
CVE-2019-5785
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 72.0.3626.81
Skia (affected versions not specified)
Description
The issue is related to incorrect convexity calculations in the Skia library, which can be exploited by a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additionally, there is a vulnerability in the Skia library related to integer overflow, which can cause a denial of service when exploited by a remote attacker.
Recommendations
For Google Chrome versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue.
For Skia, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Google Chrome
Red Hat
Skia
Suse
Ubuntu