PT-2016-3225 · Google+3 · Google Chrome+3
Publicado
2016-11-07
·
Atualizado
2024-06-15
·
CVE-2017-5052
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 57.0.2987.133 for Mac, Windows, and Linux
Google Chrome version prior to 57.0.2987.132 for Android
Description
The issue is caused by an incorrect assumption about block structure in Blink, allowing a remote attacker to potentially exploit memory corruption via a crafted HTML page. This could lead to security restrictions being bypassed, confidential information being obtained, arbitrary code execution with elevated privileges, or a denial of service. The exploitation is triggered by improper casting.
Recommendations
For Google Chrome versions prior to 57.0.2987.133 for Mac, Windows, and Linux, update to version 57.0.2987.133 or later.
For Google Chrome version prior to 57.0.2987.132 for Android, update to version 57.0.2987.132 or later.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Opera
Red Hat
Suse