PT-2017-3241 · Google+3 · Google Chrome+3
Publicado
2017-04-19
·
Atualizado
2024-06-15
·
CVE-2017-5062
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 58.0.3029.81 for Mac, Windows, and Linux
Google Chrome version prior to 58.0.3029.83 for Android
Opera (affected versions not specified)
Description
The issue is related to a use after free in Chrome Apps, which can allow a remote attacker to potentially perform out of bounds memory access. This can be achieved via a specially crafted Chrome extension. The estimated number of potentially affected devices worldwide is not provided.
Recommendations
For Google Chrome versions prior to 58.0.3029.81 for Mac, Windows, and Linux, update to version 58.0.3029.81 or later.
For Google Chrome version prior to 58.0.3029.83 for Android, update to version 58.0.3029.83 or later.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Opera
Red Hat
Suse