PT-2019-5058 · Google+6 · Google Chrome+6
Published
2019-11-25
·
Updated
2024-06-15
·
CVE-2019-13734
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 79.0.3945.79
Description
The issue is related to an out of bounds write in SQLite, which can be exploited by a remote attacker via a crafted HTML page, potentially leading to heap corruption. This vulnerability allows an attacker to gain unauthorized access to sensitive information and disrupt its integrity and availability. The vulnerability is notable for allowing remote attacks on the Google Chrome browser, enabling an attacker to gain control over the user's system when opening malicious web pages.
Recommendations
For Google Chrome versions prior to 79.0.3945.79, update to version 79.0.3945.79 or later to resolve the issue. As a temporary workaround, consider avoiding the use of WebSQL in Chrome until the update is applied. Restrict access to potentially malicious web pages to minimize the risk of exploitation.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Google Chrome
Red Hat
Sqlite
Suse
Ubuntu