PT-2019-13470 · Google+2 · Google Chrome+2

Alexandru Michis · Published 2019-12-03 · Updated 2024-12-12 · CVE-2019-13722

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79

Description The issue is related to an inappropriate implementation in WebRTC, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to impact the system.

Recommendations For versions prior to 79.0.3945.79, update to version 79.0.3945.79 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-3237

ALT-PU-2019-3239

ALT-PU-2019-3264

ALT-PU-2020-1166

ALT-PU-2020-1515

ALT-PU-2020-1617

CVE-2019-13722

MGASA-2019-0376

MGASA-2019-0377

OPENSUSE-SU-2020:0002-1

OPENSUSE-SU-2020:0003-1

OPENSUSE-SU-2020_0002-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:14572-1

SUSE-SU-2019:14260-1

SUSE-SU-2019:3337-1

SUSE-SU-2019:3339-1

SUSE-SU-2019:3347-1

SUSE-SU-2019_14260-1

Affected Products

Alt Linux

Google Chrome

Suse

References · 1990

• https://cve.org/CVERecord?id=CVE-2019-13722 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3347-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-13722 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2019-38 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0002-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2019-37 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13722 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:3337-1 · Vendor Advisory
• https://mozilla.org/en-US/firefox/68.3.0/releasenotes · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2019-37/#CVE-2019-13722 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3339-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10601-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2019-36 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0003-1 · Vendor Advisory