PT-2023-1175 · Google+4 · Google Chrome+4

Cassidy Kim

+2

·

Publicado

2023-01-24

·

Atualizado

2024-10-22

·

CVE-2023-0471

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 109.0.5414.119
Description The issue is related to a use after free in WebTransport, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The severity of this issue is considered high.
Recommendations For versions prior to 109.0.5414.119, update to version 109.0.5414.119 or later to resolve the issue. As a temporary workaround, consider restricting access to WebTransport until a patch is applied.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2023-1152
ALT-PU-2023-1245
ALT-PU-2023-1410
ALT-PU-2023-1462
ALT-PU-2023-1603
ALT-PU-2023-1671
BDU:2023-00392
CVE-2023-0471
DSA-5328-1
MGASA-2023-0044
OPENSUSE-SU-2023:0032-1
OPENSUSE-SU-2023:0044-1
OPENSUSE-SU-2023:0115-1
OPENSUSE-SU-2023_0044-1
OPENSUSE-SU-2023_0115-1
OPENSUSE-SU-2024:12642-1
OPENSUSE-SU-2024:12657-1
OPENSUSE-SU-2024:12948-1
USN-5881-1

Produtos afetados

Alt Linux
Astra Linux
Google Chrome
Suse
Ubuntu