PT-2023-3334 · Google+4 · Google Chrome+4

Raven

·

Publicado

2023-01-24

·

Atualizado

2024-10-17

·

CVE-2023-0473

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 109.0.5414.119
Description The issue is related to a type confusion in the ServiceWorker API, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This may impact the integrity of data. The severity of this issue is classified as Medium by Chromium.
Recommendations For versions prior to 109.0.5414.119, update to version 109.0.5414.119 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ServiceWorker API until a patch is applied.

Correção

Improperly Implemented Security Check for Standard

Type Confusion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-358CWE-843

Identificadores relacionados

ALT-PU-2023-1152
ALT-PU-2023-1245
ALT-PU-2023-1410
ALT-PU-2023-1462
ALT-PU-2023-1603
ALT-PU-2023-1671
BDU:2023-03490
CVE-2023-0473
DSA-5328-1
MGASA-2023-0044
OPENSUSE-SU-2023:0032-1
OPENSUSE-SU-2023:0044-1
OPENSUSE-SU-2023:0115-1
OPENSUSE-SU-2023_0044-1
OPENSUSE-SU-2023_0115-1
OPENSUSE-SU-2024:12642-1
OPENSUSE-SU-2024:12948-1
USN-5881-1

Produtos afetados

Alt Linux
Astra Linux
Google Chrome
Suse
Ubuntu