CVE-2017-15417

Опубликовано: 06 дек. 2017

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1523132chromium-browser: cross origin information disclosure in skia

EPSS

Процентиль: 69%

0.00618

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2017-15417

CVSS3: 5.3

ubuntu

больше 7 лет назад

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2017-15417

CVSS3: 5.3

nvd

больше 7 лет назад

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2017-15417

CVSS3: 5.3

debian

больше 7 лет назад

Inappropriate implementation in Skia canvas composite operations in Go ...

GHSA-4mj8-jjg7-c6p5

CVSS3: 5.3

github

больше 3 лет назад

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

openSUSE-SU-2017:3244-1

suse-cvrf

около 8 лет назад

Security update for chromium

EPSS

Процентиль: 69%

0.00618

Низкий

6.5 Medium

CVSS3