PT-2024-3638 · Google+4 · Google Chrome+4

Shaheen Fazim · Published 2024-05-15 · Updated 2024-12-19 · CVE-2024-4950

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.60

Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to perform UI spoofing via a crafted HTML page. This could be achieved if the attacker convinced a user to engage in specific UI gestures. The severity of this issue is considered low.

Recommendations: For versions prior to 125.0.6422.60, update to version 125.0.6422.60 or later to resolve the issue.

Exploit

Fix

Clickjacking

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1021

CWE-451

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-11865

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-8361

BDU:2024-03960

CVE-2024-4950

DSA-5694-1

MGASA-2024-0190

OPENSUSE-SU-2024:13982-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 50

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit