Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5091

Опубликовано: 27 окт. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

Описание

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

РелизСтатусПримечание
artful

released

60.0.3112.78-0ubuntu1.1363
bionic

released

60.0.3112.78-0ubuntu1.1363
cosmic

released

60.0.3112.78-0ubuntu1.1363
devel

released

60.0.3112.78-0ubuntu1.1363
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [60.0.3112.78-0ubuntu0.14.04.1190]]
precise/esm

DNE

trusty

released

60.0.3112.78-0ubuntu0.14.04.1190
trusty/esm

DNE

trusty was released [60.0.3112.78-0ubuntu0.14.04.1190]
upstream

released

60.0.3112.78
vivid/ubuntu-core

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [Ubuntu touch end-of-life]]
esm-infra/xenial

ignored

Ubuntu touch end-of-life
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [Ubuntu touch end-of-life]
upstream

needs-triage

Показывать по

EPSS

Процентиль: 77%
0.01098
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
почти 8 лет назад

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS3: 8.8
nvd
больше 7 лет назад

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS3: 8.8
debian
больше 7 лет назад

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 f ...

CVSS3: 8.8
github
около 3 лет назад

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость реализации IndexedDB браузера Google Chrome, связанная с использованием памяти после её освобождения, позволяющая нарушителю воздействовать на конфиденциальность, целостность и доступность данных

EPSS

Процентиль: 77%
0.01098
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3