Google Chrome prima 86.0.4240.111 Freetype buffer overflow

In Google Chrome (Web Browser) stata rilevata una vulnerabilità di livello critico. Riguarda una funzione sconosciuta del componente Freetype. L'aggiornamento alla versione 86.0.4240.111 elimina questa vulnerabilità. Una possibile soluzione è stata pubblicata immediatamente dopo la pubblicazione della vulnerabilità.

Timeline

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10661703	27/11/2020	VulD...	cvss3_nvd_basescore	6.5	nist.gov	27/11/2020	accepted	90
10661702	27/11/2020	VulD...	cvss2_nvd_basescore	4.3	nist.gov	27/11/2020	accepted	90
10661701	27/11/2020	VulD...	cvss3_meta_tempscore	6.6	see documentation	27/11/2020	accepted	90
10661700	27/11/2020	VulD...	cvss3_meta_basescore	6.9	see documentation	27/11/2020	accepted	90
10661699	27/11/2020	VulD...	cvss2_nvd_ai	P	nvd.nist.gov	27/11/2020	accepted	70
10661698	27/11/2020	VulD...	cvss2_nvd_ii	N	nvd.nist.gov	27/11/2020	accepted	70
10661697	27/11/2020	VulD...	cvss2_nvd_ci	N	nvd.nist.gov	27/11/2020	accepted	70
10661696	27/11/2020	VulD...	cvss2_nvd_au	N	nvd.nist.gov	27/11/2020	accepted	70
10661695	27/11/2020	VulD...	cvss2_nvd_ac	M	nvd.nist.gov	27/11/2020	accepted	70
10661694	27/11/2020	VulD...	cvss2_nvd_av	N	nvd.nist.gov	27/11/2020	accepted	70
10661693	27/11/2020	VulD...	cvss3_nvd_a	H	nvd.nist.gov	27/11/2020	accepted	70
10661692	27/11/2020	VulD...	cvss3_nvd_i	N	nvd.nist.gov	27/11/2020	accepted	70
10661691	27/11/2020	VulD...	cvss3_nvd_c	N	nvd.nist.gov	27/11/2020	accepted	70
10661690	27/11/2020	VulD...	cvss3_nvd_s	U	nvd.nist.gov	27/11/2020	accepted	70
10661689	27/11/2020	VulD...	cvss3_nvd_ui	R	nvd.nist.gov	27/11/2020	accepted	70
10661688	27/11/2020	VulD...	cvss3_nvd_pr	N	nvd.nist.gov	27/11/2020	accepted	70
10661687	27/11/2020	VulD...	cvss3_nvd_ac	L	nvd.nist.gov	27/11/2020	accepted	70
10661686	27/11/2020	VulD...	cvss3_nvd_av	N	nvd.nist.gov	27/11/2020	accepted	70
10661685	27/11/2020	VulD...	cve_nvd_summary	Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	cve.mitre.org	27/11/2020	accepted	70
10661684	27/11/2020	VulD...	cve_assigned	1595800800	cve.mitre.org	27/11/2020	accepted	70