Strike ID:
E19-0v621
CVSS:
8.3 (AV:N/AC:M/Au:N/C:C/I:P/A:P)
False Positive:
t
Variants:
4
Year:
2019

Description

This strike replicates a Use-After-Free exploit for Chromium browser engine. The vulnerability can be triggered via the FileReader JS API by creating two array references to the same file reader result then using another mechanism to free the underlying memory. By successfully exploiting this flaw, an attacker can execute arbitrary code in the context or the Chromes renderer process.

CVE

References

MSB

BID

ExploitDB

Secunia

Security Tracker

Metasploit

ZDI

Google

OSVDB

{}