Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.

This update for chromium to version 75.0.3770.142 fixes the following issues :

Security issue fixed :

  - CVE-2019-5847: V8 sealed/frozen elements cause crash     (boo#1141649).

  - CVE-2019-5848: Font sizes may expose sensitive     information (boo#1141649).

  - CVE-2018-20073: Fixed information leaks of URL metadata     nad passwords via extended filesystem attributes     (boo#1120892).

Non-security fix :

  - Fixed a segfault on startup (boo#1141102).

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_01_stable-channel-update-for-desktop advisory.

  - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a     remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page. (CVE-2019-5783)

  - Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to     72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2019-5759)

  - Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running     or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network     proxy. (CVE-2019-5754)

  - Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2019-5782)

  - Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (CVE-2019-5755)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_01_stable-channel-update-for-desktop advisory.

  - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a     remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page. (CVE-2019-5783)

  - Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to     72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2019-5759)

  - Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running     or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network     proxy. (CVE-2019-5754)

  - Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2019-5782)

  - Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (CVE-2019-5755)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
127735	openSUSE Security Update : chromium (openSUSE-2019-1815)	Nessus	SuSE Local Security Checks	Local	medium
121514	Google Chrome < 72.0.3626.81 Multiple Vulnerabilities	Nessus	Windows	Local	critical
121513	Google Chrome < 72.0.3626.81 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2018-20073

medium

Tenable Plugins

medium

critical

critical