PT-2017-16275 · Google+4 · Google Chrome+4
Publicado
2017-03-09
·
Atualizado
2022-04-22
·
CVE-2017-5038
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 57.0.2987.98
Description
The issue is related to a use after free bug in GuestView, which allows a remote attacker to perform an out of bounds memory read via a crafted Chrome extension. This could potentially enable the attacker to read memory outside the intended boundaries.
Recommendations
For versions prior to 57.0.2987.98, update to version 57.0.2987.98 or later to resolve the issue. As a temporary workaround, consider restricting the use of Chrome extensions to minimize the risk of exploitation.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse