PT-2019-8021 · Google+1 · Google Chrome+1

Published 2017-11-08 · Updated 2019-10-03 · CVE-2017-15404

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 61.0.3163.113

Description A local privilege escalation issue exists due to the ability to process crash dumps under root privileges and inappropriate symlinks handling in Crash Reporting. This could allow a local attacker to perform privilege escalation via a crafted HTML page.

Recommendations For versions prior to 61.0.3163.113, update to version 61.0.3163.113 or later to resolve the issue.

Exploit

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

ALT-PU-2017-2600

CVE-2017-15404

Affected Products

Alt Linux

Google Chrome

References · 4

• 🔥 https://crbug.com/766275 · Exploit
• https://osv.dev/vulnerability/CVE-2017-15404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15404 · Security Note
• https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html · Note