PT-2017-16290

CVE-2017-5081

·

Publicado

2017-06-05

·

Atualizado

2024-06-15

Descrição por

CVSS 3.1
3.3
Baixa
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux Google Chrome versions prior to 59.0.3071.92 for Android
Description The issue is related to a lack of verification of an extension's locale folder in Google Chrome, which allowed an attacker with local write access to modify extensions by modifying extension files. This could potentially lead to unauthorized changes to the extension's behavior.
Recommendations For Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux, update to version 59.0.3071.86 or later. For Google Chrome versions prior to 59.0.3071.92 for Android, update to version 59.0.3071.92 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2017-1713
MGASA-2017-0317
OPENSUSE-SU-2017:1501-1
OPENSUSE-SU-2017:1502-1
OPENSUSE-SU-2017_1502-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2017:1399
RHSA-2017_1399
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾