CVE-2017-5007 in Chrome
Summary
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
01/02/2017
Disclosure
02/17/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 97072 | Google Chrome Blink Universal cross site scripting | 79 | Not defined | Official fix | CVE-2017-5007 |