Vulnerabilities > CVE-2019-13698 - Out-of-bounds Write vulnerability in Google Chrome
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Out of bounds memory access in JavaScript in Google Chrome prior to 73.0.3683.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
NASL family MacOS X Local Security Checks NASL id MACOSX_GOOGLE_CHROME_73_0_3683_103.NASL description The version of Google Chrome installed on the remote macOS host is prior to 73.0.3683.103. It is, therefore, affected by a heap corruption vulnerability as referenced in the 2019_04_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 131737 published 2019-12-06 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/131737 title Google Chrome < 73.0.3683.103 Heap Corruption code # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(131737); script_version("1.3"); script_cvs_date("Date: 2019/12/13"); script_cve_id("CVE-2019-13698"); script_name(english:"Google Chrome < 73.0.3683.103 Heap Corruption"); script_summary(english:"Checks the version of Google Chrome."); script_set_attribute(attribute:"synopsis", value: "A web browser installed on the remote macOS host is affected by multiple vulnerabilities."); script_set_attribute(attribute:"description", value: "The version of Google Chrome installed on the remote macOS host is prior to 73.0.3683.103. It is, therefore, affected by a heap corruption vulnerability as referenced in the 2019_04_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number."); # https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop.html script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f7c59919"); script_set_attribute(attribute:"see_also", value:"https://crbug.com/944971"); script_set_attribute(attribute:"solution", value: "Upgrade to Google Chrome version 73.0.3683.103 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-13698"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/04/04"); script_set_attribute(attribute:"patch_publication_date", value:"2019/04/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/12/06"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:google:chrome"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"MacOS X Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("macosx_google_chrome_installed.nbin"); script_require_keys("MacOSX/Google Chrome/Installed"); exit(0); } include('google_chrome_version.inc'); get_kb_item_or_exit('MacOSX/Google Chrome/Installed'); google_chrome_check_version(fix:'73.0.3683.103', severity:SECURITY_WARNING, xss:FALSE, xsrf:FALSE);NASL family Windows NASL id GOOGLE_CHROME_73_0_3683_103.NASL description The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.103. It is, therefore, affected by an heap corruption vulnerability as referenced in the 2019_04_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 131738 published 2019-12-06 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/131738 title Google Chrome < 73.0.3683.103 Heap Corruption code # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(131738); script_version("1.3"); script_cvs_date("Date: 2019/12/13"); script_cve_id("CVE-2019-13698"); script_name(english:"Google Chrome < 73.0.3683.103 Heap Corruption"); script_summary(english:"Checks the version of Google Chrome."); script_set_attribute(attribute:"synopsis", value: "A web browser installed on the remote Windows host is affected by multiple vulnerabilities."); script_set_attribute(attribute:"description", value: "The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.103. It is, therefore, affected by an heap corruption vulnerability as referenced in the 2019_04_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number."); # https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop.html script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f7c59919"); script_set_attribute(attribute:"see_also", value:"https://crbug.com/944971"); script_set_attribute(attribute:"solution", value: "Upgrade to Google Chrome version 73.0.3683.103 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-13698"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/04/04"); script_set_attribute(attribute:"patch_publication_date", value:"2019/04/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/12/06"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:google:chrome"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Windows"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("google_chrome_installed.nasl"); script_require_keys("SMB/Google_Chrome/Installed"); exit(0); } include('google_chrome_version.inc'); get_kb_item_or_exit('SMB/Google_Chrome/Installed'); installs = get_kb_list('SMB/Google_Chrome/*'); google_chrome_check_version(installs:installs, fix:'73.0.3683.103', severity:SECURITY_WARNING, xss:FALSE, xsrf:FALSE);