The vulnerability of the offline audio context component in the Google Chrome web browser allows a hacker to execute arbitrary code.

🗓️ 13 Aug 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Chrome offline audio context flaw enables remote code execution on a crafted page from out-of-bounds memory.

Reporter	Title	Published	Views	Family All 60
ArchLinux	[ASA-201908-1] chromium: multiple issues	2 Aug 201900:00	–	archlinux
Circl	CVE-2019-5851	27 Feb 202415:16	–	circl
CNVD	Google Chrome suffers from an unspecified vulnerability (CNVD-2019-26522)	2 Aug 201900:00	–	cnvd
CVE	CVE-2019-5851	25 Nov 201914:22	–	cve
Cvelist	CVE-2019-5851	25 Nov 201914:22	–	cvelist
Debian	[SECURITY] [DSA 4500-1] chromium security update	13 Aug 201905:17	–	debian
Debian	[SECURITY] [DSA 4500-1] chromium security update	13 Aug 201905:17	–	debian
Debian CVE	CVE-2019-5851	25 Nov 201914:22	–	debiancve
Tenable Nessus	Debian DSA-4500-1 : chromium - security update	14 Aug 201900:00	–	nessus
Tenable Nessus	Fedora 29 : qt5-qtwebengine (2019-e5ff5d0ffd)	15 Oct 201900:00	–	nessus

Vulners

Node

google google_chromeRange<76.0.3809.87

OR

novell opensuse_leapMatch15.0

OR

novell opensuse_leapMatch15.1

Source	Link
chromereleases	www.chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/164486
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-5851
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-5851
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
web	www.web.nvd.nist.gov/view/vuln/detail

21 Nov 2023 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 36.3

CVSS 27.5

EPSS0.00328

Google Chrome offline audio context out of bounds memory remote code execution crafted page