PT-2016-3255 · Google · Chrome Os

Geohot · Published 2016-09-21 · Updated 2018-03-27 · CVE-2016-5179

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Chrome OS versions prior to 53.0.2785.144

Description The issue is caused by a buffer overflow in memory, allowing remote attackers to execute arbitrary commands at boot. This can be exploited by a remote attacker to execute commands during the system startup.

Recommendations For Chrome OS versions prior to 53.0.2785.144, update to version 53.0.2785.144 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-00554

CVE-2016-5179

Affected Products

Chrome Os

References · 6

• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=649039 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5179 · Security Note
• https://bdu.fstec.ru/vul/2018-00554 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5179 · Vendor Advisory
• https://chromereleases.googleblog.com/2016/09/stable-channel-updates-for-chrome-os.html · Note
• http://securityfocus.com/bid/93260 · Note