PT-2019-8021 · Google+1 · Google Chrome+1

Publicado 2017-11-08 · Atualizado 2019-10-03 · CVE-2017-15404

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 61.0.3163.113

Description A local privilege escalation issue exists due to the ability to process crash dumps under root privileges and inappropriate symlinks handling in Crash Reporting. This could allow a local attacker to perform privilege escalation via a crafted HTML page.

Recommendations For versions prior to 61.0.3163.113, update to version 61.0.3163.113 or later to resolve the issue.

Exploit

Correção

LPE

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

ALT-PU-2017-2600

CVE-2017-15404

Produtos afetados

Alt Linux

Google Chrome

Referências · 4

• 🔥 https://crbug.com/766275 · Exploit
• https://osv.dev/vulnerability/CVE-2017-15404 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15404 · Nota de Segurança