CVE-2017-5081: Input Validation
First published: Tue Jun 06 2017(Updated: )
Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Chrome | <59.0.3071.86 | |
| Apple macOS | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Debian Debian Linux | =9.0 | |
| Google Chrome | <59.0.3071.92 | |
| Google Android | ||
| Redhat Enterprise Linux Desktop | =6.0 | |
| Redhat Enterprise Linux Server | =6.0 | |
| Redhat Enterprise Linux Workstation | =6.0 | |
| redhat/Chrome | <59.0.3071.86 | 59.0.3071.86 |
Remedy
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/98861
- http://www.securitytracker.com/id/1038622
- https://access.redhat.com/errata/RHSA-2017:1399
- https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
- https://crbug.com/672008
- https://security.gentoo.org/glsa/201706-20
- https://code.google.com/p/chromium/issues/detail?id=672008
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1459040
- https://bugzilla.redhat.com/show_bug.cgi?id=1459034
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2017-5081
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/trending
- vendor/google
- canonical/google chrome
- vendor/apple
- canonical/apple macos
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- canonical/google android
- vendor/redhat
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/6.0
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/6.0
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/6.0
- package-manager/redhat