Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5053

Опубликовано: 27 окт. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 9.6

Описание

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.

РелизСтатусПримечание
artful

released

58.0.3029.81-0ubuntu2.1350
bionic

released

58.0.3029.81-0ubuntu2.1350
cosmic

released

58.0.3029.81-0ubuntu2.1350
devel

released

58.0.3029.81-0ubuntu2.1350
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [58.0.3029.81-0ubuntu0.14.04.1172]]
precise

ignored

precise/esm

DNE

precise was ignored
trusty

released

58.0.3029.81-0ubuntu0.14.04.1172
trusty/esm

DNE

trusty was released [58.0.3029.81-0ubuntu0.14.04.1172]
upstream

released

57.0.2987.133

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise

ignored

end of life
precise/esm

DNE

precise was needs-triage
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support
cosmic

ignored

end of life
devel

ignored

libv8 not supported
esm-apps/bionic

ignored

libv8 not supported
esm-apps/xenial

ignored

libv8 not supported
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [libv8 not supported]]
precise

DNE

precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [Ubuntu touch end-of-life]]
esm-infra/xenial

ignored

Ubuntu touch end-of-life
precise

DNE

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [Ubuntu touch end-of-life]

Показывать по

EPSS

Процентиль: 80%
0.01324
Низкий

6.8 Medium

CVSS2

9.6 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
почти 9 лет назад

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.

CVSS3: 9.6
nvd
больше 8 лет назад

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.

CVSS3: 9.6
debian
больше 8 лет назад

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 fo ...

CVSS3: 9.6
github
больше 3 лет назад

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.

CVSS3: 9.6
fstec
почти 9 лет назад

Уязвимость ядра JavaScript V8 браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 80%
0.01324
Низкий

6.8 Medium

CVSS2

9.6 Critical

CVSS3