PT-2020-2073

CVE-2020-6450

·

تاريخ النشر

2020-03-31

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.162
Description The issue is related to a use after free in the WebAudio component, which can be exploited by a remote attacker via a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to gain unauthorized access to sensitive data, cause a denial of service, or impact data integrity.
Recommendations For versions prior to 80.0.3987.162, update to version 80.0.3987.162 or later to resolve the issue. As a temporary workaround, consider restricting access to WebAudio functionality until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2020-1706
ALT-PU-2020-1765
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4654-1
MGASA-2020-0174
OPENSUSE-SU-2020:0512-1
OPENSUSE-SU-2020:0519-1
OPENSUSE-SU-2020_0519-1
OPENSUSE-SU-2020:0540-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:1350
RHSA-2020_1350
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾