2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"status":"affected","version":"prior to 73.0.3683.75"}]}],"source":"chrome-cve-admin@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","matchCriteriaId":"EA174888-9FEB-4029-8E0D-D6CFCF1A74F6","versionEndExcluding":"73.0.3683.75","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:opensuse:backports:sle-15:*:*:*:*:*:*:*","matchCriteriaId":"1CBC4824-9D9F-427D-87A6-60B2CEBAAFEE","vulnerable":true},{"criteria":"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E78106-58E6-4D59-990F-75DA575BFAD9","vulnerable":true},{"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493","vulnerable":true},{"criteria":"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*","matchCriteriaId":"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page."},{"lang":"es","value":"Un desbordamiento de enteros que provoca un uso de memoria previamente liberada (use-after-free) en WebMIDI en Google Chrome en Windows antes de la versión 73.0.3683.75, permitió que un atacante remoto que había comprometido el proceso del renderizador ejecutara código arbitrario por medio de una página HTML creada."}],"id":"CVE-2019-5789","lastModified":"2026-06-17T02:38:12.560","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-05-23T20:29:00.670","references":[{"source":"chrome-cve-admin@google.com","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"},{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"},{"source":"chrome-cve-admin@google.com","url":"https://crbug.com/921581"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://crbug.com/921581"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"},{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}
|