Google Chrome V8 <73.0.3683.86缓冲区溢出漏洞

详细信息

漏洞类型

缓冲区错误

漏洞描述

Google Chrome是美国谷歌（Google）公司的一款Web浏览器。Google Chrome 73.0.3683.86之前版本中的JavaScript存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

修复建议

从Google Chrome发布网站升级至Google Chrome的最新版本（74.0.3729.131或更高版本）： https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html

参考链接

• https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html

  CVE · x_refsource_MISC

• http://chromethegame.com/
• https://crbug.com/941743

  CVE · x_refsource_MISC

• http://www.debian.org/security/2019/dsa-4500
• https://www.auscert.org.au/bulletins/ESB-2019.3085/
• https://packetstormsecurity.com/files/156641/Google-Chrome-72-73-Array.map-Corruption.html

  CVE · x_refsource_MISC

• https://www.exploit-db.com/exploits/48183
• https://packetstormsecurity.com/files/154053/Debian-Security-Advisory-4500-1.html
• https://vigilance.fr/vulnerability/Google-Chrome-four-vulnerabilities-29214
• https://nvd.nist.gov/vuln/detail/CVE-2019-5825
• http://packetstormsecurity.com/files/156641/Google-Chrome-72-73-Array.map-Corruption.html

  CVE · x_refsource_MISC

• https://osv.dev/vulnerability/DSA-4500-1

  OSV

• https://ubuntu.com/security/CVE-2019-5825

  OSV

• https://www.cve.org/CVERecord?id=CVE-2019-5825

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2019-5825

  OSV

• https://security-tracker.debian.org/tracker/CVE-2019-5825

  OSV

• https://osv.dev/vulnerability/CVE-2019-5825

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2019-5825

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5825

  NVD