PT-2020-6537 · Google+3 · Google Chrome+3

Mark Brand · Publicado 2020-10-13 · Atualizado 2024-06-15 · CVE-2020-15986

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Nome do software vulnerável e versões afetadas

Versões do Google Chrome anteriores à 86.0.4240.75

Descrição

O problema é causado por um estouro de inteiro no componente de mídia, que pode ser explorado por um invasor remoto para potencialmente causar corrupção de heap. Isso pode ser feito por meio de uma página HTML maliciosa.

Recomendações

Para versões anteriores à 86.0.4240.75, atualize para a versão 86.0.4240.75 ou posterior para resolver o problema.

Correção

Integer Overflow

Use After Free

Enumeração de Fraquezas

CWE-190

CWE-416

Identificadores relacionados

ALT-PU-2020-3035

ALT-PU-2020-3144

ALT-PU-2021-1157

ALT-PU-2021-1210

ALT-PU-2021-1379

BDU:2021-06071

CVE-2020-15986

DSA-4824-1

OPENSUSE-SU-2020:1705-1

OPENSUSE-SU-2020:1715-1

OPENSUSE-SU-2020:1829-1

OPENSUSE-SU-2020_1705-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:4235

RHSA-2020_4235

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Suse

Referências · 2346

• https://suse.com/security/cve/CVE-2022-0463 · Nota
• https://suse.com/security/cve/CVE-2021-30517 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2022-3071 · Nota
• https://suse.com/security/cve/CVE-2015-1216 · Nota
• https://suse.com/security/cve/CVE-2016-5131 · Nota
• https://suse.com/security/cve/CVE-2017-5075 · Nota
• https://suse.com/security/cve/CVE-2021-4101 · Nota
• https://suse.com/security/cve/CVE-2021-21225 · Nota
• https://suse.com/security/cve/CVE-2022-1314 · Nota
• https://suse.com/security/cve/CVE-2012-5148 · Nota
• https://suse.com/security/cve/CVE-2021-21113 · Nota
• https://suse.com/security/cve/CVE-2023-1819 · Nota
• https://suse.com/security/cve/CVE-2019-13702 · Nota
• https://suse.com/security/cve/CVE-2021-21208 · Nota