PT-2023-6634 · Google+3 · Google Chrome+3
Pwn2Car
·
Publicado
2023-10-31
·
Atualizado
2024-11-29
·
CVE-2023-5852
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 119.0.6045.105
Description
The issue is related to a use after free in the Printing component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via specific UI gestures. This could be achieved by convincing a user to engage in specific UI gestures or by using a specially crafted web page. The severity of this issue is classified as Medium.
Recommendations
For Google Chrome versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider restricting access to the Printing component until a patch is applied. Avoid using specific UI gestures that could trigger the exploitation of heap corruption.
Exploit
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Google Chrome
Red Os