Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-6043

Опубликовано: 24 янв. 2018
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1538515chromium-browser: insufficient escaping with external url handlers

EPSS

Процентиль: 81%
0.01563
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.

CVSS3: 8.8
nvd
больше 7 лет назад

Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.

CVSS3: 8.8
debian
больше 7 лет назад

Insufficient data validation in External Protocol Handler in Google Ch ...

CVSS3: 8.8
github
больше 3 лет назад

Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость компонента External Protocol Handler браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 81%
0.01563
Низкий

6.5 Medium

CVSS3