CVE-2017-5008 in Chrome

Tóm tắt

Bởi MITRE

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Đặt trước: 02/01/2017
• Tiết lộ: 17/02/2017
• Kiểm duyệt: được chấp nhận
• mục: VDB-97073
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 6.1 (NVD)
• EPSS: 0.01221
• KEV: không
• Các hoạt động: rất thấp
• ngành: Pharma, Government, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-5008
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-5008
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-5008/