PT-2019-5113 · Google+3 · Google Chrome+3

Publicado

2019-10-10

·

Atualizado

2024-06-15

·

CVE-2019-13696

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.120
Description The issue is related to a use after free in JavaScript, which can lead to heap corruption. A remote attacker could potentially exploit this to gain unauthorized access to information and disrupt its integrity and availability using a specially crafted HTML page.
Recommendations For versions prior to 77.0.3865.120, update to version 77.0.3865.120 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2019-3045
ALT-PU-2020-1050
ALT-PU-2020-1707
ALT-PU-2020-2441
BDU:2020-01780
CVE-2019-13696
DSA-4562-1
MGASA-2019-0304
OPENSUSE-SU-2019:2311-1
OPENSUSE-SU-2019:2312-1
OPENSUSE-SU-2019:2313-1
OPENSUSE-SU-2019:2314-1
OPENSUSE-SU-2019:2447-1
OPENSUSE-SU-2019_2311-1
OPENSUSE-SU-2019_2312-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2019:3211
RHSA-2019_3211

Produtos afetados

Alt Linux
Google Chrome
Red Hat
Suse