PT-2023-8701 · Google+4 · Mojo+5

Cassidy Kim + 1 · Published 2023-12-06 · Updated 2024-12-19 · CVE-2024-1670

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 122.0.6261.57

Description The issue is related to a use after free vulnerability in the Mojo library of Google Chrome, which can lead to heap corruption. This can potentially allow a remote attacker to execute arbitrary code by exploiting the vulnerability via a crafted HTML page.

Recommendations For versions prior to 122.0.6261.57, update to version 122.0.6261.57 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages until the update is applied.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-3320

BDU:2024-01615

CVE-2024-1670

DSA-5629-1

OPENSUSE-SU-2024:0084-1

OPENSUSE-SU-2024:13738-1

OPENSUSE-SU-2024:13764-1

OPENSUSE-SU-2024:13766-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Mojo

Red Os

References · 93

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit