Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
El desbordamiento del búfer de memoria en libwebp en Google Chrome anterior a 116.0.5845.187 y libwebp 1.3.2 permitía a un atacante remoto realizar una escritura en memoria fuera de los límites a través de una página HTML manipulada. (Severidad de seguridad de Chromium: crítica)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-787
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| chrome | * | <built-in method update of dict object at 0x7c3c40dd4f40> | Application | |
| fedoraproject | fedora | 37 | <built-in method update of dict object at 0x7c3c40dd6dc0> | Operating System |
| fedoraproject | fedora | 38 | <built-in method update of dict object at 0x7c3c40dd4e80> | Operating System |
| fedoraproject | fedora | 39 | <built-in method update of dict object at 0x7c3bf3b4f540> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7c3c40dd4cc0> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7c3c40dd5200> | Operating System |
| debian | debian_linux | 12.0 | <built-in method update of dict object at 0x7c3c40dd6e80> | Operating System |
| mozilla | firefox | * | <built-in method update of dict object at 0x7c3c40dd6440> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7c3bf1320540> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7c3c40dd7f40> | Application |
| mozilla | thunderbird | * | <built-in method update of dict object at 0x7c3c40dd5dc0> | Application |
| mozilla | thunderbird | * | <built-in method update of dict object at 0x7c3c40dd7e00> | Application |
| microsoft | edge_chromium | * | <built-in method update of dict object at 0x7c3c483bea40> | Application |
| microsoft | teams | * | <built-in method update of dict object at 0x7c3bf3b4fcc0> | Application |
| microsoft | teams | * | <built-in method update of dict object at 0x7c3bf3e4ef80> | Application |
| microsoft | webp_image_extension | * | <built-in method update of dict object at 0x7c3bf3b4f780> | Application |
| webmproject | libwebp | * | <built-in method update of dict object at 0x7c3bf3e4f580> | Application |
| netapp | active_iq_unified_manager | - | <built-in method update of dict object at 0x7c3c483bf0c0> | Application |
| bentley | seequent_leapfrog | * | <built-in method update of dict object at 0x7c3bf3b4f480> | Application |
| bandisoft | honeyview | * | <built-in method update of dict object at 0x7c3c483bf440> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
| Yes | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:microsoft:teams:*:*:*:*:*:macos:*:* |
| Yes | cpe:2.3:a:microsoft:teams:*:*:*:*:desktop:*:*:* |
| Yes | cpe:2.3:a:microsoft:webp_image_extension:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:bentley:seequent_leapfrog:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:bandisoft:honeyview:*:*:*:*:*:*:*:* |