CVE-2017-5084

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 59.0.3071.92

Description The issue is related to an inappropriate implementation in the image-burner component. A local attacker could potentially read local files by sending dbus-send commands to a BurnImage D-Bus endpoint, specifically the "/org/chromium/flashrom/BurnImage" endpoint, using variables such as dbus-send commands.

Recommendations For Google Chrome OS versions prior to 59.0.3071.92, update to version 59.0.3071.92 or later to resolve the issue.