PT-2017-16281 · Google+5 · Skia+7

Published 2017-03-09 · Updated 2024-06-15 · CVE-2017-5044

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Google Chrome for Android version 57.0.2987.108 and earlier Opera (affected versions not specified)

Description The issue allows a remote attacker to perform an out of bounds memory read via a crafted HTML page, due to a heap buffer overflow in filter processing in Skia. This enables attackers to view memory content beyond boundaries.

Recommendations For Google Chrome versions prior to 57.0.2987.98, update to version 57.0.2987.98 or later. For Google Chrome for Android version 57.0.2987.108 and earlier, update to version 57.0.2987.108 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2017-1391

CVE-2017-5044

DSA-3810-1

MGASA-2017-0111

OPENSUSE-SU-2017:0738-1

OPENSUSE-SU-2017:0740-1

OPENSUSE-SU-2017_0738-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2017:0499

RHSA-2017_0499

USN-3236-1

Affected Products

Alt Linux

Google Chrome

Google Chrome For Android

Opera

Red Hat

Skia

Suse

Ubuntu

References · 2362

• https://nvd.nist.gov/vuln/detail/CVE-2017-5044 · Security Note
• https://osv.dev/vulnerability/DSA-3810-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5029 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5033 · Vendor Advisory
• https://security.gentoo.org/glsa/201704-02 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-5044 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5044 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-5044 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2017:0740-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0111.html · Security Note
• https://ubuntu.com/security/CVE-2017-5041 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:0738-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5040 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory