PT-2017-16290
CVE-2017-5081
·
Publicado
2017-06-05
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
3.3
BaixaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux
Google Chrome versions prior to 59.0.3071.92 for Android
Description
The issue is related to a lack of verification of an extension's locale folder in Google Chrome, which allowed an attacker with local write access to modify extensions by modifying extension files. This could potentially lead to unauthorized changes to the extension's behavior.
Recommendations
For Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux, update to version 59.0.3071.86 or later.
For Google Chrome versions prior to 59.0.3071.92 for Android, update to version 59.0.3071.92 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾