CVE-2017-5121: falha em Google Chrome prior to 61.0.3163.100 for…
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.3%
Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.
Referências
https://access.redhat.com/errata/RHSA-2017:2792https://blogs.technet.microsoft.com/mmpc/2017/10/18/browser-security-beyond-sandboxing/https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.htmlhttps://crbug.com/765433https://security.gentoo.org/glsa/201709-25http://www.debian.org/security/2017/dsa-3985http://www.securityfocus.com/bid/100947http://www.securitytracker.com/id/1039497