CVE-2017-5030

Google Chromium V8 Memory Corruption Vulnerability

Chrome

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.

25. Apr 2017

Ausgewertete Quellen

• Chrome
  https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
• Debian
  http://www.debian.org/security/2017/dsa-3810
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2017-0499.html
• Hinweis
  http://www.securityfocus.com/bid/96767
• Hinweis
  https://security.gentoo.org/glsa/201704-02
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-20-126/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5030
• CISA
  Google Chromium V8 Memory Corruption Vulnerability
• NVD
  CVE-2017-5030