PT-2018-2941 · Google+3 · Google Chrome+3

Published 2018-11-19 · Updated 2024-06-15 · CVE-2018-17479

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.110

Description The issue is related to incorrect object lifetime calculations in the GPU code, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using a specially crafted HTML page, allowing them to execute arbitrary code in the context of the current user or cause a denial of service.

Recommendations For Google Chrome versions prior to 70.0.3538.110, update to version 70.0.3538.110 or later to resolve the issue.

Exploit

Fix

Use After Free

Memory Corruption

Weakness Enumeration

CWE-416

CWE-787

Related Identifiers

ALT-PU-2018-2879

BDU:2019-02689

CVE-2018-17479

DSA-4342-1

OPENSUSE-SU-2018_3871-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2018:3648

RHSA-2018_3648

Affected Products

Alt Linux

Google Chrome

Red Hat

Suse

References · 2322

• 🔥 https://crbug.com/905336 · Exploit
• https://bdu.fstec.ru/vul/2019-02689 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-17479 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17479 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-17479 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-17479 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17479 · Security Note
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-21192 · Note
• https://suse.com/security/cve/CVE-2023-0129 · Note
• https://suse.com/security/cve/CVE-2022-3044 · Note
• https://suse.com/security/cve/CVE-2018-6089 · Note
• https://suse.com/security/cve/CVE-2022-1872 · Note