Back to feed
EUVD-2021-8540 · Published Feb 22, 2021
Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
Technologies
Fedoraproject FedoraGoogle ChromeLinux Linux Kernel
Weaknesses
CWE-787
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - v2.06.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://crbug.com/1138143
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/
- https://security.gentoo.org/glsa/202104-08
Potentially impacted assets
See if this affects your attack surface
