PT-2019-4985 · Google+3 · Google Chrome+3
Publicado
2019-09-18
·
Atualizado
2024-06-15
·
CVE-2019-13685
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 77.0.3865.90
Description
The issue is related to a use after free vulnerability in the sharing view of Google Chrome, which can be exploited by a remote attacker via a crafted HTML page, potentially leading to heap corruption. This vulnerability allows an attacker to gain unauthorized access to information and disrupt its integrity and availability. The vulnerability is caused by accessing already freed memory in handlers related to the user interface.
Recommendations
For Google Chrome versions prior to 77.0.3865.90, update to version 77.0.3865.90 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could exploit this vulnerability. Restrict access to sensitive information until the update is applied.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse