PT-2017-3244 · Google+3 · Google Chrome+3

Published 2017-04-19 · Updated 2024-06-15 · CVE-2017-5058

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81

Description A use after free in the PrintPreview function of the browser allows a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. This could enable the attacker to access memory beyond the application's boundaries.

Recommendations For Google Chrome versions prior to 58.0.3029.81, update to version 58.0.3029.81 or later to resolve the issue. For Opera versions prior to 58.0.3029.81, update to version 58.0.3029.81 or later to resolve the issue. As a temporary workaround, consider disabling the PrintPreview function until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2017-02678

CVE-2017-5058

OPENSUSE-SU-2017:1098-1

OPENSUSE-SU-2017:1100-1

OPENSUSE-SU-2017_1098-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2017:1124

RHSA-2017_1124

Affected Products

Google Chrome

Opera

Red Hat

Suse

References · 2329

• https://security.gentoo.org/glsa/201705-02 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1124 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02678 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2017:1098-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:1100-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-5058 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-5058 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5058 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5058 · Security Note
• https://suse.com/security/cve/CVE-2021-21192 · Note
• https://suse.com/security/cve/CVE-2023-0129 · Note
• https://suse.com/security/cve/CVE-2022-3044 · Note