CVE-2018-6092

An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
References
Link Resource
https://crbug.com/819869 Issue Tracking Exploit Vendor Advisory
https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html Release Notes Vendor Advisory
https://www.exploit-db.com/exploits/44860/ Exploit VDB Entry Third Party Advisory
https://www.debian.org/security/2018/dsa-4182 Third Party Advisory
https://security.gentoo.org/glsa/201804-22 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1195 Third Party Advisory
http://www.securityfocus.com/bid/103917 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux_server:6.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Information

Published : 2018-12-04 09:29

Updated : 2019-03-01 11:39


NVD link : CVE-2018-6092

Mitre link : CVE-2018-6092


JSON object : View

CWE
CWE-190

Integer Overflow or Wraparound

Advertisement

dedicated server usa

Products Affected

redhat

  • linux_desktop
  • linux_server
  • linux_workstation

google

  • chrome

debian

  • debian_linux