PT-2017-16290

CVE-2017-5081

·

Published

2017-06-05

·

Updated

2024-06-15

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux Google Chrome versions prior to 59.0.3071.92 for Android
Description The issue is related to a lack of verification of an extension's locale folder in Google Chrome, which allowed an attacker with local write access to modify extensions by modifying extension files. This could potentially lead to unauthorized changes to the extension's behavior.
Recommendations For Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux, update to version 59.0.3071.86 or later. For Google Chrome versions prior to 59.0.3071.92 for Android, update to version 59.0.3071.92 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2017-1713
MGASA-2017-0317
OPENSUSE-SU-2017:1501-1
OPENSUSE-SU-2017:1502-1
OPENSUSE-SU-2017_1502-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2017:1399
RHSA-2017_1399
Found an issue in the description? Have something to add? Feel free to write us 👾