PT-2019-2893 · Google+3 · Google Chrome+3
Publicado
2019-07-30
·
Atualizado
2024-06-15
·
CVE-2019-5851
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 76.0.3809.87
Description
The issue is related to a use after free in WebAudio, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page, allowing for arbitrary code execution. The vulnerability is caused by an out-of-bounds operation in the offline audio context component of the web browser.
Recommendations
For versions prior to 76.0.3809.87, update to version 76.0.3809.87 or later to resolve the issue. As a temporary workaround, consider restricting access to WebAudio components until the update is applied. Avoid using the offline audio context feature in Google Chrome until the issue is resolved.
Exploit
Correção
Use After Free
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse