Lucene search

Heap buffer overflow in CefSharp

🗓️ 27 Oct 2020 19:38:47Reported by GitHub Advisory DatabaseType

Heap buffer overflow in CefSharp due to FreeType font rendering librar

Reporter	Title	Published	Views	Family All 199
Qualys Blog	Vulnerability Detection Pipeline (Beta)	16 Sep 202017:43	–	qualysblog
Ubuntu	FreeType vulnerability	22 Oct 202000:00	–	ubuntu
Ubuntu	FreeType vulnerability	20 Oct 202000:00	–	ubuntu
Tenable Nessus	Debian DSA-4777-1 : freetype - security update	23 Oct 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : freetype2 (openSUSE-2020-1734)	29 Oct 202000:00	–	nessus
Tenable Nessus	RHEL 8 : freetype (RHSA-2020:4949)	5 Nov 202000:00	–	nessus
Tenable Nessus	CentOS 7 : freetype (RHSA-2020:4907)	6 Nov 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2 : freetype (ALAS-2020-1565)	9 Dec 202000:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: freetype (CVE-2020-15999)	8 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : freetype (EulerOS-SA-2020-2496)	1 Dec 202000:00	–	nessus

Vulners

Node

cefsharp.wpf.hwndhostRange<85.3.130

cefsharp.winformsRange<85.3.130

cefsharp.wpfRange<85.3.130

cefsharp.commonRange<85.3.130

Source	Link
github	www.github.com/cefsharp/CefSharp/security/advisories/GHSA-pv36-h7jh-qm62
nuget	www.nuget.org/packages/CefSharp.WinForms
nuget	www.nuget.org/packages/CefSharp.Wpf
nuget	www.nuget.org/packages/CefSharp.Wpf.HwndHost
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15999
chromereleases	www.chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
crbug	www.crbug.com/1139963
lists	www.lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
security	www.security.gentoo.org/glsa/202011-12
seclists	www.seclists.org/fulldisclosure/2020/Nov/33

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2020 19:47Current

1Low risk

Vulners AI Score1

CVSS24.3

CVSS39.6

EPSS0.93131