Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5081

Опубликовано: 27 окт. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 3.3

Описание

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

РелизСтатусПримечание
artful

released

59.0.3071.109-0ubuntu1.1360
bionic

released

59.0.3071.109-0ubuntu1.1360
cosmic

released

59.0.3071.109-0ubuntu1.1360
devel

released

59.0.3071.109-0ubuntu1.1360
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [59.0.3071.109-0ubuntu0.14.04.1186]]
precise/esm

DNE

trusty

released

59.0.3071.109-0ubuntu0.14.04.1186
trusty/esm

DNE

trusty was released [59.0.3071.109-0ubuntu0.14.04.1186]
upstream

released

59.0.3071.86
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [Ubuntu touch end-of-life]]
esm-infra-legacy/xenial

ignored

Ubuntu touch end-of-life
esm-infra/xenial

ignored

end of ESM support, was ignored [Ubuntu touch end-of-life]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [Ubuntu touch end-of-life]

Показывать по

EPSS

Процентиль: 27%
0.00339
Низкий

2.1 Low

CVSS2

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 9 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
nvd
почти 9 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
debian
почти 9 лет назад

Lack of verification of an extension's locale folder in Google Chrome ...

CVSS3: 3.3
github
больше 4 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

EPSS

Процентиль: 27%
0.00339
Низкий

2.1 Low

CVSS2

3.3 Low

CVSS3