Dana Keeler

Falhas de segurança de memória envolvendo corrupção de memória podem permitir que um invasor execute código arbitrário.

O problema decorre do uso de um hash MD5 inseguro para armazenar manifestos de aplicativos web, permitindo uma colisão de hash que poderia sobrescrever o manifesto de outro aplicativo. Isso poderia ser explorado para executar código arbitrário no contexto de outro aplicativo.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by a heap-based buffer overflow in the ASN.1 decoder. This can be exploited by remote attackers using specially crafted OCTET STRING data, potentially leading to a denial of service or the execution of arbitrary code.

The issue allows user-assisted man-in-the-middle attackers to bypass intended access restrictions. This can be achieved by triggering a user dialog for an X.509 certificate problem, such as an expired certificate or a mismatched hostname for a domain with pinning enabled.

The issue affects the browser engine, allowing remote attackers to cause a denial of service, which results in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.