Description
Google Chrome存在类型混淆漏洞。此漏洞是由于对接收的文件缺乏校验导致的。
Google Chrome CVE-2023-3420 类型混淆漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.venustech.com.cn/new_type/aqtg/20230628/25832.html
https://www.tenablecloud.cn/plugins/nessus/177635
https://avd.aliyun.com/detail?id=AVD-2023-3420
https://nvd.nist.gov/vuln/detail/cve-2023-3420
https://github.blog/security/vulnerability-research/getting-rce-in-chrome-with-incorrect-side-effect-in-the-jit-compiler/
https://securitylab.github.com/advisories/GHSL-2023-137_Chrome/
https://dayzerosec.com/vulns/2023/10/10/type-confusion-exploit-in-chrome-cve-2023-3420.html
https://www.secrss.com/articles/70042
https://www.ithome.com.tw/news/157532
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3420