PT-2017-14044 · Opera+4 · Opera+5
Kushal Arvind Shah
·
Publicado
2017-10-17
·
Atualizado
2024-06-15
·
CVE-2017-15388
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 62.0.3202.62
Opera versions prior to 62.0.3202.62 (note: exact version not specified, assuming similar to Chrome)
Description
The issue allows a remote attacker to perform an out of bounds memory read via a crafted HTML page. This is due to iteration through non-finite points in Skia.
Recommendations
For Google Chrome versions prior to 62.0.3202.62, update to version 62.0.3202.62 or later.
For Opera, since the exact fixed version is not specified, it is recommended to update to the latest version available, ensuring it is at or later than the equivalent Chrome fix.
As a temporary workaround, consider restricting access to crafted HTML pages until a patch is available.
Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Skia
Suse