Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-6033

Опубликовано: 25 сент. 2018
Источник: debian

Описание

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromium-browserfixed64.0.3282.119-1package
chromium-browserend-of-lifejessiepackage
chromium-browserend-of-lifewheezypackage

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVSS3: 8.8
redhat
около 8 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVSS3: 8.8
nvd
больше 7 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVSS3: 8.8
github
больше 3 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость компонента Download File Handler браузера Google Chrome, позволяющая нарушителю выполнить произвольный код