Non notée

CVE-2017-5007 Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly…

Description

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android	Versions non publiées

Références

95792 www.securityfocus.com
chromereleases.googleblog.com chromereleases.googleblog.com
GLSA-201701-66 security.gentoo.org
RHSA-2017:0206 rhn.redhat.com
crbug.com crbug.com
1037718 www.securitytracker.com
DSA-3776 www.debian.org

Chronologie

Publiée 17 février 2017
Dernière modification 5 août 2024

Les 16 CVE de Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android →

CVE-2017-5009 WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to… Non notée CVE-2017-5020 Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user… Non notée CVE-2017-5010 Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises… Non notée CVE-2017-5019 A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android,… Non notée

Suivre cette CVE