BROWSER-CHROME -- Snort has detected suspicious traffic known to exploit vulnerabilities present in the Chrome browser. These rules are separate from the "browser-webkit" category; while it uses the Webkit rendering engine, there's a lot of other features to create a secondary Chrome category.
BROWSER-CHROME Google Chrome Blink use-after-free attempt
Chrome browser prior to 77.0.3865.90 is vulnerable to a use-after-free in Blink. Blink is the rendering engine for the Chrome browser and an attacker can gain code execution by triggering this vulnerability remotely.
What To Look For
This rule alerts when attempt is made to trigger a use-after-free condition in Chrome browser's Blink framework.
Public information/Proof of Concept available
No known false positives
Cisco Talos Intelligence Group
MITRE ATT&CK Framework
Technique: User Execution
For reference, see the MITRE ATT&CK vulnerability types here:
Use After Free
Use After Free (UAF) attacks target computer memory flaws to corrupt the memory execute code. The name refers to attempts to use memory after it has been freed, which can cause a program to crash under normal circumstances, or result in remote code execution in a successful attack.
CVE Additional Information
CVE-2019-13688Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
||Ease of Access||LOW