PT-2017-3197 · Google+2 · Google Chrome+2
Published
2017-06-15
·
Updated
2025-09-29
·
CVE-2017-5088
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux
Google Chrome versions prior to 59.0.3071.117 for Android
Description
The issue is related to insufficient validation of untrusted input in the V8 component of Google Chrome. This can be exploited by a remote attacker to perform out of bounds memory access using a specially crafted HTML page.
Recommendations
For Google Chrome versions prior to 59.0.3071.104 for Mac, Windows, and Linux, update to version 59.0.3071.104 or later.
For Google Chrome versions prior to 59.0.3071.117 for Android, update to version 59.0.3071.117 or later.
As a temporary workaround, consider restricting access to untrusted HTML pages until the issue is resolved.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chrome
Opera
Red Hat