Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5081

Опубликовано: 05 июн. 2017
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1459034chromium-browser: extension verification bypass

EPSS

Процентиль: 6%
0.00025
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
nvd
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
debian
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome ...

CVSS3: 3.3
github
больше 3 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

EPSS

Процентиль: 6%
0.00025
Низкий

6.5 Medium

CVSS3