PT-2019-2786 · Google+3 · Google Chrome+3

Mark Amery · Published 2019-07-15 · Updated 2024-06-15 · CVE-2019-5848

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.142

Description The issue concerns incorrect font handling in autofill, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This could also lead to unauthorized access to protected information or cause a denial of service with a specially formed web page.

Recommendations For versions prior to 75.0.3770.142, update to version 75.0.3770.142 or later to resolve the issue.

Fix

Information Disclosure

Cleartext Storage of Sensitive Information

XSS

Weakness Enumeration

CWE-200

CWE-312

CWE-79

Related Identifiers

ALT-PU-2019-2410

ALT-PU-2019-2502

BDU:2019-02738

CVE-2019-5848

DSA-4500-1

MGASA-2019-0283

OPENSUSE-SU-2019:1815-1

OPENSUSE-SU-2019_1815-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2019:1930

RHSA-2019_1930

Affected Products

Alt Linux

Google Chrome

Red Hat

Suse

References · 2350

• https://advisories.mageia.org/MGASA-2019-0283.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:1815-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-5848 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-5848 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02738 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-5848 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5848 · Security Note
• https://osv.dev/vulnerability/DSA-4500-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5848 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-5848 · Vendor Advisory