PT-2019-4626 · Google+3 · Google Chrome+3
Mark Brand
·
Publicado
2019-01-28
·
Atualizado
2024-06-15
·
CVE-2019-5788
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 73.0.3683.75
Description
The issue is related to an integer overflow that leads to a use-after-free in Blink Storage. This allows a remote attacker who has compromised the renderer process to execute arbitrary code via a crafted HTML page. The exploitation of this issue may also allow an attacker to impact data integrity, access confidential data, and cause a denial of service using a specially crafted HTML page.
Recommendations
For versions prior to 73.0.3683.75, update to version 73.0.3683.75 or later to resolve the issue.
Exploit
Correção
Use After Free
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse