PT-2017-3181 · Google+3 · Google Chrome+4
Publicado
2017-03-16
·
Atualizado
2024-06-15
·
CVE-2017-5053
CVSS v3.1
9.6
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 57.0.2987.133 for Linux, Windows, and Mac
Google Chrome version prior to 57.0.2987.132 for Android
Description
The issue is related to an out-of-bounds read in V8, which allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is connected to the
Array.prototype.indexOf method.Recommendations
For Google Chrome versions prior to 57.0.2987.133 for Linux, Windows, and Mac, update to version 57.0.2987.133 or later.
For Google Chrome version prior to 57.0.2987.132 for Android, update to version 57.0.2987.132 or later.
As a temporary workaround, consider restricting the use of the
Array.prototype.indexOf method until a patch is available.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Google Chrome
Opera
Red Hat
Suse
V8