PT-2017-3229 · Google+4 · Google Chrome+4
Published
2017-06-05
·
Updated
2024-06-15
·
CVE-2017-5074
CVSS v3.1
8.0
High
| Vector | AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 59.0.3071.86
Opera versions prior to 59.0.3071.86 (no specific version range provided, but implied to be affected by the same issue as Google Chrome)
Description
A use after free issue in Chrome Apps, related to Bluetooth, allows a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can be exploited by a remote attacker, but no information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations
For Google Chrome versions prior to 59.0.3071.86, update to version 59.0.3071.86 or later to resolve the issue.
For Opera, since the specific fixed version is not provided, it is recommended to update to the latest version available, as it is implied to include the fix for this issue.
As a temporary workaround, consider disabling Bluetooth functionality in Chrome Apps until a patch is available.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Google Chrome
Opera
Red Hat
Suse