Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-5774

Опубликовано: 29 янв. 2019
Источник: redhat
CVSS3: 6.5

Описание

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1670758chromium-browser: Insufficient validation of untrusted input in SafeBrowsing

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 7 лет назад

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.

CVSS3: 8.8
nvd
почти 7 лет назад

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.

CVSS3: 8.8
debian
почти 7 лет назад

Omission of the .desktop filetype from the Safe Browsing checklist in ...

CVSS3: 8.8
github
больше 3 лет назад

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.

CVSS3: 8.8
fstec
около 7 лет назад

Уязвимость браузера Google Chrome, связанная с некорректной проверкой ввода данных, позволяющая нарушителю загрузить .desktop файл для выполнения произвольного кода

6.5 Medium

CVSS3