PT-2017-14054 · Google+3 · V8+4

Published 2017-10-26 · Updated 2018-10-31 · CVE-2017-15406

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.75 Opera versions prior to 62.0.3202.75 is not specified, however since Opera is mentioned as affected, we can say: Opera (affected versions not specified)

Description A stack buffer overflow in V8 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Recommendations For Google Chrome versions prior to 62.0.3202.75, update to version 62.0.3202.75 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2600

CVE-2017-15406

DSA-4020-1

MGASA-2017-0423

RHSA-2017:3082

RHSA-2017_3082

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

V8

References · 18

• 🔥 https://crbug.com/770450 · Exploit
• https://cve.org/CVERecord?id=CVE-2017-15406 · Security Note
• https://advisories.mageia.org/MGASA-2017-0423.html · Security Note
• https://ubuntu.com/security/CVE-2017-15406 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15406 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15406 · Security Note
• https://osv.dev/vulnerability/DSA-4020-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0423 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15406 · Vendor Advisory
• https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html · Note
• https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=21670 · Note
• https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html · Note
• https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html · Note
• https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html · Note