PT-2017-3200 · Google+3 · Google Chrome+3
Publicado
2017-06-05
·
Atualizado
2024-06-15
·
CVE-2017-5085
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59 for iOS
Description
The issue is related to the inappropriate implementation in Bookmarks, allowing a remote attacker to run JavaScript on chrome:// pages via a crafted bookmark. This could be achieved if the attacker convinced the user to perform certain operations. The vulnerability is associated with the failure to protect the web page structure, potentially enabling a remote attacker to execute a JavaScript script on a chrome:// page using a specially crafted bookmark.
Recommendations
For Google Chrome versions prior to 59 for iOS, update to version 59 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted bookmarks and restricting access to chrome:// pages to minimize the risk of exploitation.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse