PT-2019-5035 · Google+2 · Google Chrome+2

David Erceg · Publicado 2019-09-10 · Atualizado 2020-08-24 · CVE-2019-13691

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75

Description The issue is related to insufficient validation of untrusted input in navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This could potentially compromise data integrity.

Recommendations For versions prior to 77.0.3865.75, update to version 77.0.3865.75 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-2796

ALT-PU-2020-1050

ALT-PU-2020-1707

ALT-PU-2020-2441

BDU:2020-01672

CVE-2019-13691

DSA-4562-1

RHSA-2019:3211

RHSA-2019_3211

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Referências · 14

• https://osv.dev/vulnerability/DSA-4562-1 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13691 · Nota de Segurança
• https://crbug.com/966914 · Nota
• https://security-tracker.debian.org/tracker/CVE-2019-13691 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13691 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13691 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-13691 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html · Nota
• https://cve.org/CVERecord?id=CVE-2019-13691 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2019:3211 · Nota
• https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 · Nota
• https://bdu.fstec.ru/vul/2020-01672 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-13691 · Aviso do Fabricante