CVE-2017-5028: Input Validation
Published Jan 25, 2017
·Updated
Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Software
2 affected componentsFixes available
Google Chrome<56.0.2924.76
56.0.2924.76
Google Chrome<56.0.2924.76
Event History
Jan 25, 2017
CVE Published
12:00 AM
Jun 27, 2019
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2017-5028?
CVE-2017-5028 has been classified as a high severity vulnerability due to its potential for cross-origin data leakage.
2
How do I fix CVE-2017-5028?
To fix CVE-2017-5028, upgrade Google Chrome to version 56.0.2924.76 or later.
3
What type of attack does CVE-2017-5028 enable?
CVE-2017-5028 enables attackers to leak cross-origin data through a crafted HTML page.
4
Which versions of Google Chrome are affected by CVE-2017-5028?
CVE-2017-5028 affects Google Chrome versions prior to 56.0.2924.76.
5
What component of Google Chrome is impacted by CVE-2017-5028?
CVE-2017-5028 impacts the V8 JavaScript engine within Google Chrome.