CVE-2017-5077: Buffer Overflow
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=716311
External References:
https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
Other sources
Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5077?
CVE-2017-5077 has a critical severity rating due to its potential for remote code execution through an out of bounds memory read.
How do I fix CVE-2017-5077?
To fix CVE-2017-5077, update Google Chrome to version 59.0.3071.86 or later.
Who is affected by CVE-2017-5077?
CVE-2017-5077 affects all users of Google Chrome versions prior to 59.0.3071.86 on Linux, Windows, and Mac.
What is the nature of the vulnerability in CVE-2017-5077?
CVE-2017-5077 is caused by insufficient validation of untrusted input in the Skia component of Google Chrome.
Can CVE-2017-5077 be exploited through a web page?
Yes, CVE-2017-5077 can be exploited by attackers through a crafted HTML page.