PT-2019-4618 · Google+3 · Google Chrome+3
Publicado
2019-01-14
·
Atualizado
2024-06-15
·
CVE-2019-5789
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 73.0.3683.75
Description
The issue is related to an integer overflow in the WebMIDI function of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This exploitation can lead to unauthorized access to confidential data, disruption of data integrity, and denial of service. The vulnerability allows a remote attacker who has compromised the renderer process to execute arbitrary code.
Recommendations
For versions prior to 73.0.3683.75, update to version 73.0.3683.75 or later to resolve the issue. As a temporary workaround, consider restricting access to WebMIDI functions until the update is applied.
Exploit
Correção
Use After Free
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse