CVE-2019-5804: Command Injection
Published Feb 17, 2019
·Updated
Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.
Credit
Joshua Graham(TSS)
Affected Software
7 affected componentsFixes available
Google Chrome<73.0.3683.75
73.0.3683.75
Google Chrome<73.0.3683.75
Microsoft Windows
openSUSE Backports=sle-15
openSUSE Leap=15.0
openSUSE Leap=15.1
openSUSE Leap=42.3
Event History
Feb 17, 2019
CVE Published
12:00 AM
May 23, 2019
CVE Published
via MITRE·07:21 PM
Data Sourced
via MITRE·07:21 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2019-5804?
CVE-2019-5804 has a severity rating of medium due to its potential for domain spoofing.
2
How do I fix CVE-2019-5804?
To fix CVE-2019-5804, update Google Chrome to version 73.0.3683.75 or later.
3
Who is affected by CVE-2019-5804?
Users of Google Chrome prior to version 73.0.3683.75 are affected by CVE-2019-5804.
4
What type of vulnerability is CVE-2019-5804?
CVE-2019-5804 is a local attacker vulnerability that allows for domain spoofing through improper command line processing.
5
What versions of Google Chrome are impacted by CVE-2019-5804?
All versions of Google Chrome before 73.0.3683.75 are impacted by CVE-2019-5804.