Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2018-17481     A use-after-free issue was discovered in the pdfium     library.

  - CVE-2019-5754     Klzgrad discovered an error in the QUIC networking     implementation.

  - CVE-2019-5755     Jay Bosamiya discovered an implementation error in the     v8 JavaScript library.

  - CVE-2019-5756     A use-after-free issue was discovered in the pdfium     library.

  - CVE-2019-5757     Alexandru Pitis discovered a type confusion error in the     SVG image format implementation.

  - CVE-2019-5758     Zhe Jin discovered a use-after-free issue in     blink/webkit.

  - CVE-2019-5759     Almog Benin discovered a use-after-free issue when     handling HTML pages containing select elements.

  - CVE-2019-5760     Zhe Jin discovered a use-after-free issue in the WebRTC     implementation.

  - CVE-2019-5762     A use-after-free issue was discovered in the pdfium     library.

  - CVE-2019-5763     Guang Gon discovered an input validation error in the v8     JavaScript library.

  - CVE-2019-5764     Eyal Itkin discovered a use-after-free issue in the     WebRTC implementation.

  - CVE-2019-5765     Sergey Toshin discovered a policy enforcement error.

  - CVE-2019-5766     David Erceg discovered a policy enforcement error.

  - CVE-2019-5767     Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao     reported an error in the WebAPKs user interface.

  - CVE-2019-5768     Rob Wu discovered a policy enforcement error in the     developer tools.

  - CVE-2019-5769     Guy Eshel discovered an input validation error in     blink/webkit.

  - CVE-2019-5770     hemidallt discovered a buffer overflow issue in the     WebGL implementation.

  - CVE-2019-5772     Zhen Zhou discovered a use-after-free issue in the     pdfium library.

  - CVE-2019-5773     Yongke Wong discovered an input validation error in the     IndexDB implementation.

  - CVE-2019-5774     Junghwan Kang and Juno Im discovered an input validation     error in the SafeBrowsing implementation.

  - CVE-2019-5775     evil1m0 discovered a policy enforcement error.

  - CVE-2019-5776     Lnyas Zhang discovered a policy enforcement error.

  - CVE-2019-5777     Khalil Zhani discovered a policy enforcement error.

  - CVE-2019-5778     David Erceg discovered a policy enforcement error in the     Extensions implementation.

  - CVE-2019-5779     David Erceg discovered a policy enforcement error in the     ServiceWorker implementation.

  - CVE-2019-5780     Andreas Hegenberg discovered a policy enforcement error.

  - CVE-2019-5781     evil1m0 discovered a policy enforcement error.

  - CVE-2019-5782     Qixun Zhao discovered an implementation error in the v8     JavaScript library.

  - CVE-2019-5783     Shintaro Kobori discovered an input validation error in     the developer tools.

  - CVE-2019-5784     Lucas Pinheiro discovered an implementation error in the     v8 JavaScript library.

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_01_stable-channel-update-for-desktop advisory.

  - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a     remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page. (CVE-2019-5783)

  - Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to     72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2019-5759)

  - Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running     or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network     proxy. (CVE-2019-5754)

  - Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2019-5782)

  - Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (CVE-2019-5755)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_01_stable-channel-update-for-desktop advisory.

  - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a     remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page. (CVE-2019-5783)

  - Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to     72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2019-5759)

  - Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running     or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network     proxy. (CVE-2019-5754)

  - Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2019-5782)

  - Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker     to perform arbitrary read/write via a crafted HTML page. (CVE-2019-5755)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
122272	Debian DSA-4395-1 : chromium - security update	Nessus	Debian Local Security Checks	critical
121514	Google Chrome < 72.0.3626.81 Multiple Vulnerabilities	Nessus	Windows	critical
121513	Google Chrome < 72.0.3626.81 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2019-5783

high

Tenable Plugins

critical

critical

critical