Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
El desbordamiento del búfer en la codificación vp8 en libvpx en Google Chrome anterior a 117.0.5938.132 y libvpx 1.13.1 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-787
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| webmproject | libvpx | * | <built-in method update of dict object at 0x7e60eb26db00> | Application |
| microsoft | edge | 116.0.1938.98 | <built-in method update of dict object at 0x7e61342d6b80> | Application |
| microsoft | edge | 117.0.2045.47 | <built-in method update of dict object at 0x7e6111a5c300> | Application |
| microsoft | edge_chromium | 116.0.5845.229 | <built-in method update of dict object at 0x7e60ba791c00> | Application |
| microsoft | edge_chromium | 117.0.5938.132 | <built-in method update of dict object at 0x7e60eb26f980> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7e60eb26f540> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7e60e86ce9c0> | Application |
| mozilla | firefox | * | <built-in method update of dict object at 0x7e60bb8877c0> | Application |
| mozilla | thunderbird | * | <built-in method update of dict object at 0x7e60e86cd700> | Application |
| fedoraproject | fedora | 37 | <built-in method update of dict object at 0x7e60eb26c340> | Operating System |
| fedoraproject | fedora | 38 | <built-in method update of dict object at 0x7e60ba791640> | Operating System |
| fedoraproject | fedora | 39 | <built-in method update of dict object at 0x7e6107fb71c0> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7e60a888f600> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7e613c3a9780> | Operating System |
| debian | debian_linux | 12.0 | <built-in method update of dict object at 0x7e6107fb4500> | Operating System |
| apple | ipados | * | <built-in method update of dict object at 0x7e61079ca7c0> | Operating System |
| apple | ipados | 16.7 | <built-in method update of dict object at 0x7e60a8b7db80> | Operating System |
| apple | iphone_os | * | <built-in method update of dict object at 0x7e60e86ce940> | Operating System |
| apple | iphone_os | 16.7 | <built-in method update of dict object at 0x7e60ba792600> | Operating System |
| chrome | * | <built-in method update of dict object at 0x7e60eb26e180> | Application | |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7e61079c9a00> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:webmproject:libvpx:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:microsoft:edge:116.0.1938.98:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:microsoft:edge:117.0.2045.47:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:microsoft:edge_chromium:116.0.5845.229:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:microsoft:edge_chromium:117.0.5938.132:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
| Yes | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:* |
| Yes | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:ipados:16.7:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |