Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
El desbordamiento del búfer de memoria en libwebp en Google Chrome anterior a 116.0.5845.187 y libwebp 1.3.2 permitía a un atacante remoto realizar una escritura en memoria fuera de los límites a través de una página HTML manipulada. (Severidad de seguridad de Chromium: crítica)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-787
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| chrome | * | <built-in method update of dict object at 0x7763d8711140> | Application | |
| fedoraproject | fedora | 37 | <built-in method update of dict object at 0x7763d8b467c0> | Operating System |
| fedoraproject | fedora | 38 | <built-in method update of dict object at 0x7763a2d50dc0> | Operating System |
| fedoraproject | fedora | 39 | <built-in method update of dict object at 0x7763d8b89780> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7763d8713080> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7763d87130c0> | Operating System |
| debian | debian_linux | 12.0 | <built-in method update of dict object at 0x7763a2d53380> | Operating System |
| mozilla | firefox | * | <built-in method update of dict object at 0x7763a2d518c0> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7763a2d50940> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7763d8712b00> | Application |
| mozilla | thunderbird | * | <built-in method update of dict object at 0x7763d8ead540> | Application |
| mozilla | thunderbird | * | <built-in method update of dict object at 0x7763f0722780> | Application |
| microsoft | edge_chromium | * | <built-in method update of dict object at 0x7763a2d52040> | Application |
| microsoft | teams | * | <built-in method update of dict object at 0x7763d8ed9180> | Application |
| microsoft | teams | * | <built-in method update of dict object at 0x7763d8713bc0> | Application |
| microsoft | webp_image_extension | * | <built-in method update of dict object at 0x7763a2d52300> | Application |
| webmproject | libwebp | * | <built-in method update of dict object at 0x7763d87109c0> | Application |
| netapp | active_iq_unified_manager | - | <built-in method update of dict object at 0x7763a2d51e80> | Application |
| bentley | seequent_leapfrog | * | <built-in method update of dict object at 0x7763a2d519c0> | Application |
| bandisoft | honeyview | * | <built-in method update of dict object at 0x7763a2d50280> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
| Yes | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:microsoft:teams:*:*:*:*:*:macos:*:* |
| Yes | cpe:2.3:a:microsoft:teams:*:*:*:*:desktop:*:*:* |
| Yes | cpe:2.3:a:microsoft:webp_image_extension:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:bentley:seequent_leapfrog:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:bandisoft:honeyview:*:*:*:*:*:*:*:* |