CVE-2017-5053 An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via...
CriticalCVSS 9.6
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 57.0.2987.133 | 57.0.2987.133 |
| Google Chrome | < 57.0.2987.132 | 57.0.2987.132 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- 97220 vdb-entry
- zerodayinitiative.com
- RHSA-2017:0860 vendor-advisory
- chromereleases.googleblog.com
- crbug.com
- GLSA-201704-02 vendor-advisory