CVE-2019-5786

Related Files

Chrome Browser FileReader Use-After-Free

Posted Mar 3, 2021

Authored by Akshay Sharma

This whitepaper goes into detail on how to leverage a Chrome Browser use-after-free vulnerability in FileReader with Metasploit.

tags | paper

advisories | CVE-2019-5786

SHA-256 | 426daf836d595f934234e05cd94b8dc830e5e8415fdebf4f297113f87753387c

Download | Favorite | View

Chrome 72.0.3626.119 FileReader Use-After-Free

Posted May 8, 2019

Authored by Clement LECIGNE, timwr, Istvan Kurucsai | Site metasploit.com

This exploit takes advantage of a use after free vulnerability in Google Chrome 72.0.3626.119 running on Windows 7 x86. The FileReader.readAsArrayBuffer function can return multiple references to the same ArrayBuffer object, which can be freed and overwritten with sprayed objects. The dangling ArrayBuffer reference can be used to access the sprayed objects, allowing arbitrary memory access from Javascript. This is used to write and execute shellcode in a WebAssembly object. The shellcode is executed within the Chrome sandbox, so you must explicitly disable the sandbox for the payload to be successful.

tags | exploit, arbitrary, x86, javascript, shellcode

systems | windows

advisories | CVE-2019-5786

SHA-256 | 60039dc761905e4a2ed93286404ec19777dfd73ef434ef8a80431ab28e2ebbc1

Download | Favorite | View

Gentoo Linux Security Advisory 201903-23

Posted Mar 28, 2019

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201903-23 - Multiple vulnerabilities have been found in Chromium, the worst of which could result in the remote execution of code. Versions less than 73.0.3683.75 are affected.

tags | advisory, remote, vulnerability

systems | linux, gentoo

advisories | CVE-2018-17479, CVE-2019-5786, CVE-2019-5787, CVE-2019-5788, CVE-2019-5789, CVE-2019-5790, CVE-2019-5791, CVE-2019-5792, CVE-2019-5793, CVE-2019-5794, CVE-2019-5795, CVE-2019-5796, CVE-2019-5797, CVE-2019-5798, CVE-2019-5799, CVE-2019-5800, CVE-2019-5801, CVE-2019-5802, CVE-2019-5803, CVE-2019-5804

SHA-256 | 0d758e392119bc08e7cd6fc9d8eb0febf9dc6149e7e5fd26f8a4b2a5e96d918f

Download | Favorite | View

Debian Security Advisory 4404-1

Posted Mar 11, 2019

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4404-1 - Clement Lecigne discovered a use-after-free issue in chromium's file reader implementation. A maliciously crafted file could be used to remotely execute arbitrary code because of this problem.

tags | advisory, arbitrary

systems | linux, debian

advisories | CVE-2019-5786

SHA-256 | 8f90590a0d9134bb918684d8b431f13960f3247bb429356abdc11b14c5ef01a5

Download | Favorite | View

Red Hat Security Advisory 2019-0481-01

Posted Mar 11, 2019

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2019-0481-01 - Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 72.0.3626.121. Issues addressed include a use-after-free vulnerability.

tags | advisory, web

systems | linux, redhat

advisories | CVE-2019-5786

SHA-256 | 3945ba5b4ef3b8be100a9c3e58657eb27ff509e67c2daf8e5c77aa7cae009bcb

Download | Favorite | View