Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-5081

Опубликовано: 27 окт. 2017
Источник: nvd
CVSS3: 3.3
CVSS2: 2.1
EPSS Низкий

Описание

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 59.0.3071.86 (исключая)

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 59.0.3071.92 (исключая)
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%
0.00025
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 6.5
redhat
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
debian
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome ...

CVSS3: 3.3
github
больше 3 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

EPSS

Процентиль: 6%
0.00025
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-20