PT-2017-3244 · Google+3 · Google Chrome+3

Publicado

2017-04-19

·

Atualizado

2024-06-15

·

CVE-2017-5058

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81
Description A use after free in the PrintPreview function of the browser allows a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. This could enable the attacker to access memory beyond the application's boundaries.
Recommendations For Google Chrome versions prior to 58.0.3029.81, update to version 58.0.3029.81 or later to resolve the issue. For Opera versions prior to 58.0.3029.81, update to version 58.0.3029.81 or later to resolve the issue. As a temporary workaround, consider disabling the PrintPreview function until a patch is available.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2017-02678
CVE-2017-5058
OPENSUSE-SU-2017:1098-1
OPENSUSE-SU-2017:1100-1
OPENSUSE-SU-2017_1098-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2017:1124
RHSA-2017_1124

Produtos afetados

Google Chrome
Opera
Red Hat
Suse