A vulnerability in SQLite allows remote attacks on Chrome via WebSQL.
Security researchers from the Chinese company Tencent have presented a new variant of the Magellan vulnerability (CVE-2019-13734), which allows for code execution when processing SQL constructs formatted in a specific way in the SQLite database. A similar vulnerability was published by the same researchers a year ago. The vulnerability is notable as it enables remote attacks on the Chrome browser and permits control over the user's system when opening web pages controlled by the attacker. […]
