CVE-2019-5785MEDIUM
Description
Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
References
https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html
Details
Source: MITRE
Published: 2019-06-27
Updated: 2019-07-01
Type: CWE-787
Risk Information
CVSS v2.0
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3.0
Base Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 2.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 127579 | Oracle Linux 8 : thunderbird (ELSA-2019-1144) | Nessus | Oracle Linux Local Security Checks | high |
| 127459 | NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0169) | Nessus | NewStart CGSL Local Security Checks | high |
| 127427 | NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0153) | Nessus | NewStart CGSL Local Security Checks | high |
| 127319 | NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0095) | Nessus | NewStart CGSL Local Security Checks | high |
| 127308 | NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2019-0090) | Nessus | NewStart CGSL Local Security Checks | high |
| 127257 | NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0062) | Nessus | NewStart CGSL Local Security Checks | high |
| 127245 | NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0056) | Nessus | NewStart CGSL Local Security Checks | medium |
| 124845 | RHEL 8 : thunderbird (RHSA-2019:1144) | Nessus | Red Hat Local Security Checks | high |
| 123817 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1162) | Nessus | SuSE Local Security Checks | high |
| 123781 | SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:0871-1) | Nessus | SuSE Local Security Checks | high |
| 123747 | SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:0852-1) | Nessus | SuSE Local Security Checks | high |
| 123581 | GLSA-201904-07 : Mozilla Thunderbird and Firefox: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 123562 | CentOS 7 : thunderbird (CESA-2019:0681) | Nessus | CentOS Local Security Checks | high |
| 123561 | CentOS 6 : thunderbird (CESA-2019:0680) | Nessus | CentOS Local Security Checks | high |
| 700486 | Mozilla Firefox < 65.0.1 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | medium |
| 123488 | RHEL 7 : thunderbird (RHSA-2019:0681) | Nessus | Red Hat Local Security Checks | high |
| 123487 | RHEL 6 : thunderbird (RHSA-2019:0680) | Nessus | Red Hat Local Security Checks | high |
| 123485 | Oracle Linux 7 : thunderbird (ELSA-2019-0681) | Nessus | Oracle Linux Local Security Checks | high |
| 123484 | Oracle Linux 6 : thunderbird (ELSA-2019-0680) | Nessus | Oracle Linux Local Security Checks | high |
| 122732 | GLSA-201903-04 : Mozilla Firefox: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 122493 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-251) | Nessus | SuSE Local Security Checks | high |
| 122492 | openSUSE Security Update : MozillaFirefox (openSUSE-2019-248) | Nessus | SuSE Local Security Checks | medium |
| 122482 | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : Thunderbird vulnerabilities (USN-3897-1) | Nessus | Ubuntu Local Security Checks | high |
| 122470 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-250) | Nessus | SuSE Local Security Checks | medium |
| 122402 | Mozilla Thunderbird < 60.5.1 | Nessus | Windows | medium |
| 122401 | Mozilla Thunderbird < 60.5.1 | Nessus | MacOS X Local Security Checks | medium |
| 122390 | Scientific Linux Security Update : firefox on SL7.x x86_64 (20190221) | Nessus | Scientific Linux Local Security Checks | medium |
| 122389 | Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190219) | Nessus | Scientific Linux Local Security Checks | medium |
| 122352 | CentOS 7 : firefox (CESA-2019:0374) | Nessus | CentOS Local Security Checks | medium |
| 122351 | CentOS 6 : firefox (CESA-2019:0373) | Nessus | CentOS Local Security Checks | medium |
| 122336 | RHEL 7 : firefox (RHSA-2019:0374) | Nessus | Red Hat Local Security Checks | medium |
| 122335 | RHEL 6 : firefox (RHSA-2019:0373) | Nessus | Red Hat Local Security Checks | medium |
| 122327 | Oracle Linux 7 : firefox (ELSA-2019-0374) | Nessus | Oracle Linux Local Security Checks | medium |
| 122326 | Oracle Linux 6 : firefox (ELSA-2019-0373) | Nessus | Oracle Linux Local Security Checks | medium |
| 122302 | openSUSE Security Update : MozillaFirefox (openSUSE-2019-202) | Nessus | SuSE Local Security Checks | medium |
| 122269 | Debian DSA-4392-1 : thunderbird - security update | Nessus | Debian Local Security Checks | high |
| 122268 | Debian DSA-4391-1 : firefox-esr - security update | Nessus | Debian Local Security Checks | medium |
| 122263 | Debian DLA-1678-1 : thunderbird security update | Nessus | Debian Local Security Checks | high |
| 122262 | Debian DLA-1677-1 : firefox-esr security update | Nessus | Debian Local Security Checks | medium |
| 122233 | Mozilla Firefox < 65.0.1 | Nessus | Windows | medium |
| 122232 | Mozilla Firefox < 65.0.1 | Nessus | MacOS X Local Security Checks | medium |
| 122194 | Mozilla Firefox ESR < 60.5.1 | Nessus | Windows | medium |
| 122193 | Mozilla Firefox ESR < 60.5.1 | Nessus | MacOS X Local Security Checks | medium |
| 122165 | FreeBSD : mozilla -- multiple vulnerabilities (18211552-f650-4d86-ba4f-e6d5cbfcdbeb) | Nessus | FreeBSD Local Security Checks | medium |