PT-2017-3198
CVE-2017-5087
·
Publicado
2017-06-15
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux
Google Chrome versions prior to 59.0.3071.117 for Android
Description
The issue is related to a use after free in the Blink module of Google Chrome, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can also be referred to as an IndexedDB sandbox escape.
Recommendations
For Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux, update to version 59.0.3071.104 or later.
For Google Chrome versions prior to 59.0.3071.117 for Android, update to version 59.0.3071.117 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾