PT-2017-3198
CVE-2017-5087
·
Published
2017-06-15
·
Updated
2024-06-15
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux
Google Chrome versions prior to 59.0.3071.117 for Android
Description
The issue is related to a use after free in the Blink module of Google Chrome, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can also be referred to as an IndexedDB sandbox escape.
Recommendations
For Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux, update to version 59.0.3071.104 or later.
For Google Chrome versions prior to 59.0.3071.117 for Android, update to version 59.0.3071.117 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾