CVE-2019-5817: Heap buffer overflow in Angle on Windows

Q: What is CVE-2019-5817?

CVE-2019-5817 is a vulnerability found in ANGLE in Google Chrome on Windows prior to version 74.0.3729.108.

Q: How severe is CVE-2019-5817?

CVE-2019-5817 has a severity rating of 8.8, which is considered high.

Q: How can a remote attacker exploit CVE-2019-5817?

A remote attacker can potentially exploit CVE-2019-5817 by manipulating a crafted HTML page.

Q: Which software versions are affected by CVE-2019-5817?

Google Chrome on Windows prior to version 74.0.3729.108 is affected by CVE-2019-5817.

Q: Where can I find more information about CVE-2019-5817?

You can find more information about CVE-2019-5817 from the following references: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html, https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html, https://crbug.com/943709

Published Mar 19, 2019

Updated

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Credit

Wen Xu(SSLab), Georgia Tech

Affected Software

9 affected componentsFixes available

Google Chrome<74.0.3729.108

74.0.3729.108

Google Chrome<74.0.3729.108

Microsoft Windows

Debian Debian Linux=10.0

Fedoraproject Fedora=29

openSUSE Backports=sle-15

openSUSE Leap=15.0

openSUSE Leap=15.1

openSUSE Leap=42.3

Remediation

Patch Available

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html

Event History

Mar 19, 2019

CVE Published

12:00 AM

Jun 27, 2019

CVE Published

via MITRE·04:13 PM

Data Sourced

via MITRE·04:13 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

286281954613599470

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2019-5817?