PT-2019-6442 · Google+3 · Google Chrome+3
Sergei Glazunov
·
Publicado
2019-12-18
·
Atualizado
2024-06-15
·
CVE-2020-6385
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 80.0.3987.87
Description
The issue is related to insufficient policy enforcement in storage and inadequate checking of unusual or exceptional conditions. This can be exploited by a remote attacker using a specially crafted HTML page to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations
For versions prior to 80.0.3987.87, update to version 80.0.3987.87 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages to minimize the risk of exploitation.
Exploit
Correção
Improper Check for Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse