Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5081

Опубликовано: 27 окт. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 3.3

Описание

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

РелизСтатусПримечание
artful

released

59.0.3071.109-0ubuntu1.1360
bionic

released

59.0.3071.109-0ubuntu1.1360
cosmic

released

59.0.3071.109-0ubuntu1.1360
devel

released

59.0.3071.109-0ubuntu1.1360
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [59.0.3071.109-0ubuntu0.14.04.1186]]
precise/esm

DNE

trusty

released

59.0.3071.109-0ubuntu0.14.04.1186
trusty/esm

DNE

trusty was released [59.0.3071.109-0ubuntu0.14.04.1186]
upstream

released

59.0.3071.86
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [Ubuntu touch end-of-life]]
esm-infra/xenial

ignored

Ubuntu touch end-of-life
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [Ubuntu touch end-of-life]
upstream

needs-triage

Показывать по

EPSS

Процентиль: 6%
0.00025
Низкий

2.1 Low

CVSS2

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
nvd
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS3: 3.3
debian
больше 8 лет назад

Lack of verification of an extension's locale folder in Google Chrome ...

CVSS3: 3.3
github
больше 3 лет назад

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

EPSS

Процентиль: 6%
0.00025
Низкий

2.1 Low

CVSS2

3.3 Low

CVSS3