PT-2018-17362

CVE-2018-6092

·

Publicado

2018-04-17

·

Atualizado

2024-06-15

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117
Description An integer overflow on 32-bit systems in WebAssembly allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Recommendations For Google Chrome versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later. For Opera versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-190: Integer Overflow or Wraparound
Identificadores relacionados
CVE-2018-6092
ALT-PU-2018-1639
DSA-4182-1
MGASA-2018-0268
OPENSUSE-SU-2018_1042-1
OPENSUSE-SU-2018:1175-1
OPENSUSE-SU-2018:1437-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2018:1195
RHSA-2018_1195
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com