PT-2016-3032
CVE-2016-5212
·
Publicado
2016-12-01
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 55.0.2883.75 for Mac, Windows, and Linux
Google Chrome version prior to 55.0.2883.84 for Android
Description
The issue is related to insufficient sanitization of DevTools URLs, allowing a remote attacker to read local files via a crafted HTML page. This could potentially lead to a denial of service or other system impacts.
Recommendations
For Google Chrome versions prior to 55.0.2883.75 for Mac, Windows, and Linux, update to version 55.0.2883.75 or later.
For Google Chrome version prior to 55.0.2883.84 for Android, update to version 55.0.2883.84 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾