PT-2019-2785 · Google+3 · Google Chrome+4

M3Plex

·

Publicado

2019-07-15

·

Atualizado

2024-06-15

·

CVE-2019-5847

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.142
Description The issue is related to an inappropriate implementation in JavaScript in Google Chrome, which can lead to heap corruption. This can be exploited by a remote attacker using a crafted HTML page, potentially allowing for a denial of service. The vulnerability is associated with the V8 JavaScript engine's handling of elements, specifically related to locking or "freezing" of V8 elements.
Recommendations For Google Chrome versions prior to 75.0.3770.142, update to version 75.0.3770.142 or later to resolve the issue.

Exploit

Correção

Command Injection

Memory Corruption

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-77CWE-787CWE-79

Identificadores relacionados

ALT-PU-2019-2410
ALT-PU-2019-2502
BDU:2019-02737
CVE-2019-5847
DSA-4500-1
MGASA-2019-0283
OPENSUSE-SU-2019:1815-1
OPENSUSE-SU-2019_1815-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2019:1930
RHSA-2019_1930

Produtos afetados

Alt Linux
Google Chrome
Red Hat
Suse
V8 Javascript Engine