CVE-2019-13762

Name

CVE-2019-13762

Description

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.

NVD Severity

low

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Permissions Required	https://crbug.com/1004212
Vendor Advisory	https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
REDHAT	https://access.redhat.com/errata/RHSA-2019:4238
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/
BUGTRAQ	https://seclists.org/bugtraq/2020/Jan/27
DEBIAN	https://www.debian.org/security/2020/dsa-4606
GENTOO	https://security.gentoo.org/glsa/202003-08

Match rules

CPE URI	Source package	Min version	Max version

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status