CVE-2018-17466

MEDIUM

Description

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

References

http://www.securityfocus.com/bid/105666

http://www.securityfocus.com/bid/106168

https://access.redhat.com/errata/RHSA-2018:3004

https://access.redhat.com/errata/RHSA-2018:3831

https://access.redhat.com/errata/RHSA-2018:3833

https://access.redhat.com/errata/RHSA-2019:0159

https://access.redhat.com/errata/RHSA-2019:0160

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

https://crbug.com/880906

https://lists.debian.org/debian-lts-announce/2018/12/msg00002.html

https://security.gentoo.org/glsa/201811-10

https://usn.ubuntu.com/3844-1/

https://usn.ubuntu.com/3868-1/

https://www.debian.org/security/2018/dsa-4330

https://www.debian.org/security/2018/dsa-4354

https://www.debian.org/security/2019/dsa-4362

Details

Source: MITRE

Published: 2018-11-14

Updated: 2019-03-05

Type: CWE-125

Risk Information

CVSS v2.0

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3.0

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH

Vulnerable Software

ID	Name	Product	Family	Severity
127423	NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0150)	Nessus	NewStart CGSL Local Security Checks	high
127418	NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0148)	Nessus	NewStart CGSL Local Security Checks	high
127315	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0093)	Nessus	NewStart CGSL Local Security Checks	high
127238	NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0052)	Nessus	NewStart CGSL Local Security Checks	high
127213	NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0039)	Nessus	NewStart CGSL Local Security Checks	high
125498	EulerOS 2.0 SP3 : firefox (EulerOS-SA-2019-1571)	Nessus	Huawei Local Security Checks	high
124378	EulerOS 2.0 SP2 : firefox (EulerOS-SA-2019-1282)	Nessus	Huawei Local Security Checks	high
123310	openSUSE Security Update : Chromium (openSUSE-2019-712)	Nessus	SuSE Local Security Checks	medium
123148	openSUSE Security Update : Mozilla Firefox (openSUSE-2019-1004)	Nessus	SuSE Local Security Checks	high
122674	Amazon Linux 2 : thunderbird (ALAS-2019-1168)	Nessus	Amazon Linux Local Security Checks	high
122493	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-251)	Nessus	SuSE Local Security Checks	high
122224	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-182)	Nessus	SuSE Local Security Checks	high
122192	Mozilla Firefox < 64.0	Nessus	MacOS X Local Security Checks	medium
121641	Mozilla Firefox ESR < 60.4	Nessus	MacOS X Local Security Checks	medium
700411	Mozilla Firefox < 64 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
121546	CentOS 7 : thunderbird (CESA-2019:0160)	Nessus	CentOS Local Security Checks	high
121545	CentOS 6 : thunderbird (CESA-2019:0159)	Nessus	CentOS Local Security Checks	high
121410	Scientific Linux Security Update : thunderbird on SL7.x x86_64	Nessus	Scientific Linux Local Security Checks	high
121409	Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
121408	Oracle Linux 6 : thunderbird (ELSA-2019-0159)	Nessus	Oracle Linux Local Security Checks	high
121381	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : thunderbird vulnerabilities (USN-3868-1)	Nessus	Ubuntu Local Security Checks	high
121380	RHEL 7 : thunderbird (RHSA-2019:0160)	Nessus	Red Hat Local Security Checks	high
121379	RHEL 6 : thunderbird (RHSA-2019:0159)	Nessus	Red Hat Local Security Checks	high
121378	Oracle Linux 7 : thunderbird (ELSA-2019-0160)	Nessus	Oracle Linux Local Security Checks	high
120963	Debian DSA-4362-1 : thunderbird - security update	Nessus	Debian Local Security Checks	high
120933	Fedora 28 : chromium (2018-fd194a1f14)	Nessus	Fedora Local Security Checks	medium
120342	Fedora 29 : chromium (2018-34f7f68029)	Nessus	Fedora Local Security Checks	medium
120193	SUSE SLED15 / SLES15 Security Update : MozillaFirefox, mozilla-nspr / mozilla-nss (SUSE-SU-2018:4235-1)	Nessus	SuSE Local Security Checks	high
119882	Scientific Linux Security Update : firefox on SL7.x x86_64	Nessus	Scientific Linux Local Security Checks	high
119881	Scientific Linux Security Update : firefox on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
119874	CentOS 7 : firefox (CESA-2018:3833)	Nessus	CentOS Local Security Checks	high
119873	CentOS 6 : firefox (CESA-2018:3831)	Nessus	CentOS Local Security Checks	high
119871	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr / mozilla-nss (SUSE-SU-2018:4236-1)	Nessus	SuSE Local Security Checks	high
119756	Oracle Linux 7 : firefox (ELSA-2018-3833)	Nessus	Oracle Linux Local Security Checks	high
119755	Oracle Linux 6 : firefox (ELSA-2018-3831)	Nessus	Oracle Linux Local Security Checks	high
119735	RHEL 7 : firefox (RHSA-2018:3833)	Nessus	Red Hat Local Security Checks	high
119734	RHEL 6 : firefox (RHSA-2018:3831)	Nessus	Red Hat Local Security Checks	high
119671	openSUSE Security Update : Mozilla Firefox (openSUSE-2018-1544)	Nessus	SuSE Local Security Checks	high
119667	Debian DLA-1605-1 : firefox-esr security update	Nessus	Debian Local Security Checks	high
119654	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : firefox vulnerabilities (USN-3844-1)	Nessus	Ubuntu Local Security Checks	high
119636	FreeBSD : mozilla -- multiple vulnerabilities (d10b49b2-8d02-49e8-afde-0844626317af)	Nessus	FreeBSD Local Security Checks	high
119634	Debian DSA-4354-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	high
119606	Mozilla Firefox ESR < 60.4 Multiple Vulnerabilities	Nessus	Windows	medium
119605	Mozilla Firefox ESR < 60.4 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	high
119604	Mozilla Firefox < 64.0 Multiple Vulnerabilities	Nessus	Windows	medium
119603	Mozilla Firefox < 64.0 Multiple Vulnerabilities (macOS) (deprecated)	Nessus	MacOS X Local Security Checks	high
119130	GLSA-201811-10 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
118719	Debian DSA-4330-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	medium
118386	openSUSE Security Update : Chromium (openSUSE-2018-1253)	Nessus	SuSE Local Security Checks	medium
118373	RHEL 6 : chromium-browser (RHSA-2018:3004)	Nessus	Red Hat Local Security Checks	medium
118317	openSUSE Security Update : Chromium (openSUSE-2018-1208)	Nessus	SuSE Local Security Checks	medium
118153	Google Chrome < 70.0.3538.67 Multiple Vulnerabilities	Nessus	Windows	high
118152	Google Chrome < 70.0.3538.67 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high