CVE-2017-15416: Buffer Overflow

Q: What does an attacker need to exploit this issue?

An attacker needs to persuade a user to load a crafted HTML page in an affected browser. No attacker privileges are required, and the issue is reachable over the network.

Q: Which browser versions are affected?

Google Chrome versions prior to 63.0.3239.84 are affected. The listed affected software also includes Chromium Browser packages for Debian and Red Hat Enterprise Linux Desktop, Server, and Workstation.

Q: What is the potential impact of successful exploitation?

The crafted page can trigger heap corruption through the Blob API. The vulnerability is rated medium with high confidentiality impact and no listed integrity or availability impact.

Published Dec 7, 2017

Updated

An out of bounds read flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=779314

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

Other sources

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.

Affected Software

7 affected componentsFixes available

debian/chromium-browser

redhat/chromium-browser<63.0.3239.84

63.0.3239.84

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

Debian Debian Linux=9.0

Google Chrome<63.0.3239.84

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 63.0.3239.84
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 63.0.3239.84

Event History

Dec 7, 2017

Data Sourced

via Red Hat·09:53 AM

DescriptionSeverityAffected Software

Aug 28, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker needs to persuade a user to load a crafted HTML page in an affected browser. No attacker privileges are required, and the issue is reachable over the network.

Which browser versions are affected?

Google Chrome versions prior to 63.0.3239.84 are affected. The listed affected software also includes Chromium Browser packages for Debian and Red Hat Enterprise Linux Desktop, Server, and Workstation.

What is the potential impact of successful exploitation?

The crafted page can trigger heap corruption through the Blob API. The vulnerability is rated medium with high confidentiality impact and no listed integrity or availability impact.

CVE-2017-15416: Buffer Overflow

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which browser versions are affected?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which browser versions are affected?

What is the potential impact of successful exploitation?