PT-2024-3006 · Google+4 · Google Chrome+4

Wgslfuzz · Published 2024-04-09 · Updated 2024-12-19 · CVE-2024-3515

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 123.0.6312.122

Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This can be achieved through the use of a specially designed web page, potentially leading to arbitrary code execution. The severity of this issue is considered high.

Recommendations For Google Chrome versions prior to 123.0.6312.122, update to version 123.0.6312.122 or later to resolve the issue. As a temporary workaround, consider avoiding the use of potentially vulnerable features in the Dawn component until a patch is applied.

Exploit

Fix

Use After Free

Heap Based Buffer Overflow

Weakness Enumeration

CWE-416

CWE-122

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-6499

ALT-PU-2024-7309

BDU:2024-03188

CVE-2024-3515

DSA-5656-1

MGASA-2024-0150

OPENSUSE-SU-2024:13953-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 93

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit