CVE-2022-0800 is a recently disclosed vulnerability in Google Chrome, specifically affecting the Cast UI component prior to version 99..4844.51. This vulnerability can result in heap corruption, potentially compromising the system's security. In this post, we will discuss the exploit details, provide code snippets, link to original references, and offer mitigation steps. It's crucial to note that this vulnerability requires user interaction, meaning an attacker would need to persuade the user to engage in specific actions on a malicious webpage.

Exploit Details

The vulnerability is a result of a heap buffer overflow in the Cast UI component of Google Chrome. This issue arises due to a failure to correctly allocate and manage memory when handling certain types of HTML content. An attacker can exploit this vulnerability by crafting a malicious HTML page that, when visited, can cause heap corruption, potentially leading to unauthorized access to sensitive information or even code execution.

Proof of Concept (POC)

While there is no available proof-of-concept code at the time of writing, the following code snippet demonstrates an example of an HTML page with a Cast UI feature that could potentially trigger the vulnerability. 

<!DOCTYPE html>
<html>
<head>
  <title>CVE-2022-0800 PoC</title>
</head>
<body>
  <video id="video" src="video.mp4" controls>
    Your browser does not support HTML5 video.
  </video>
  <button id="castButton">Cast</button>
  <script>
    const videoElement = document.getElementById("video");
    const castButton = document.getElementById("castButton");

    castButton.addEventListener("click", () => {
      navigator.presentation.requestSession("cast:ABCDEFGHIJKLMNOP").then((session) => {
        videoElement.setSinkId(session.sinkId).then(() => {
          // The following line simulates malicious code that could potentially trigger the vulnerability
          //maliciousCastUIInteraction();
        }).catch((error) => {
          console.error("Error:", error);
        });
      }).catch((error) => {
        console.error("Error:", error);
      });
    });
  </script>
 </body>
</html>

Original References

The official Chromium bug tracker hosts the bug report and details of the vulnerability. Additionally, Google Chrome's stable channel update announcement provides information about the fix.

Mitigation Steps

To protect against this vulnerability, users should update their Google Chrome browser to version 99..4844.51 or later. Users can check their current Google Chrome version by following these steps:

Conclusion

CVE-2022-0800 is a critical vulnerability affecting the Cast UI component of Google Chrome. It's important for users to understand the exploit details and follow the provided mitigation steps to update their browser and safeguard their systems. As always, practice caution and minimize the potential risk by scrutinizing any suspicious links or web pages before engaging with them.

Timeline

Published on: 04/05/2022 01:15:00 UTC
Last modified on: 08/15/2022 11:15:00 UTC