PT-2017-3229 · Google+4 · Google Chrome+4
Publicado
2017-06-05
·
Atualizado
2024-06-15
·
CVE-2017-5074
CVSS v3.1
8.0
Alta
| Vetor | AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.86
Opera versions prior to 59.0.3071.86 (no specific version range provided, but implied to be affected by the same issue as Google Chrome)
Description
A use after free issue in Chrome Apps, related to Bluetooth, allows a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can be exploited by a remote attacker, but no information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations
For Google Chrome versions prior to 59.0.3071.86, update to version 59.0.3071.86 or later to resolve the issue.
For Opera, since the specific fixed version is not provided, it is recommended to update to the latest version available, as it is implied to include the fix for this issue.
As a temporary workaround, consider disabling Bluetooth functionality in Chrome Apps until a patch is available.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse