CVE:CVE-2018-6152
CNNVD:CNNVD-201807-1881
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Devtools是其中的一个开发调试工具。
Google Chrome 68.0.3440.75之前版本中的DevTools存在安全漏洞，该漏洞源于Page.downloadBehavior后端的实现将下载的文件标记为安全。攻击者可通过诱使用户安装恶意的扩展利用该漏洞绕过安全限制，进而在系统上写入任意文件。
solution:Upgrade google chrome to a higher version than 66.0.3359.106,and avoid the version (,66.0.3359.106); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0