Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5054 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.372Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android Problem Types: Out-of-bounds Read Description: An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://crbug.c
d/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/699166 - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html
CVE ID: CVE-2017-5055 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.358Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.133 for Linux and Windows Problem Types: Use After Free Description: A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html - https://crbug.com/698622 - http://
s://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html - https://crbug.com/698622 - http://www.securityfocus.com/bid/97221
CVE ID: CVE-2017-5056 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.431Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android Problem Types: Use After Free Description: A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://crbu
/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/705445 - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-5057 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.309Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android Problem Types: Type Confusion Description: Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/695826 - http://www.securitytracker.com/i
HSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/695826 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5058 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.349Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Windows Problem Types: Use After Free Description: A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html -
securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - https://crbug.com/694382 - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5059 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.416Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android Problem Types: Type Confusion Description: Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://crbug.com/684684 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1
-2017:1124 - https://crbug.com/684684 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5060 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.292Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android Problem Types: Insufficient Policy Enforcement Description: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.co
ences: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/683314 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5061 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.393Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac Problem Types: Race Description: A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-
2 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - https://crbug.com/672847 - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5062 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.315Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android Problem Types: Use After Free Description: A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id
access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - https://crbug.com/702896 - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5063 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.392Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android Problem Types: Out-of-bounds Read Description: A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://
rrata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939 - https://crbug.com/700836
CVE ID: CVE-2017-5064 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.384Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Windows Problem Types: Object Corruption Description: Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://crbug.com/693974 - https://chromereleases.googleblog.com/2017/04/stable-channe
.securitytracker.com/id/1038317 - https://crbug.com/693974 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5065 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.471Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Windows and Mac Problem Types: Inappropriate implementation Description: Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/704560 - http://www.securitytracker.
ata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/704560 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5066 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.319Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android Problem Types: Inappropriate implementation Description: Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://crbug.com/690
st Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://crbug.com/690821 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5067 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.424Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac Problem Types: Inappropriate implementation Description: An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://security.gentoo.org/glsa/201705-02 - https://crbug.com/648117 - http://www.securitytracker.com/id/1038317 - https:/
ps://security.gentoo.org/glsa/201705-02 - https://crbug.com/648117 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5068 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.388Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.96 for Mac, Windows and Linux Problem Types: Race Description: Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1228 - https://chromereleases.googleblog.com/2017/05/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/98288 - https://crbug.com/679306 - https://secur
able-channel-update-for-desktop.html - http://www.securityfocus.com/bid/98288 - https://crbug.com/679306 - https://security.gentoo.org/glsa/201706-20
CVE ID: CVE-2017-5069 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.315Z Vendors: n/a Products: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android Problem Types: Inappropriate implementation Description: Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://crbug.com/691726 - https://security.gent
tainer: References: - https://access.redhat.com/errata/RHSA-2017:1124 - https://crbug.com/691726 - https://security.gentoo.org/glsa/201705-02 - http://www.securitytracker.com/id/1038317 - https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/97939
CVE ID: CVE-2017-5070 State: PUBLISHED Published: 2017-10-27T05:00:00.000Z Last Updated: 2025-10-21T23:55:30.609Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/98861 - https://crbug.com/722756 - https://access.redhat.com/errata/RHSA-2017:1399 - http:/
://www.securityfocus.com/bid/98861 - https://crbug.com/722756 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5071 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.316Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Problem Types: Out-of-bounds Read Description: Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/10
www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html - https://crbug.com/715582
CVE ID: CVE-2017-5072 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.463Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.92 for Android Problem Types: Inappropriate implementation Description: Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://crbug.com/709417 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - htt
com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5073 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.404Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Problem Types: Use After Free Description: Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - https://crbug.com/716474 - http://www.security
tyfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - https://crbug.com/716474 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5074 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.426Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Windows Problem Types: Use After Free Description: A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - https://crbug.com/700040 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://c
://crbug.com/700040 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5075 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.417Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Problem Types: User Information Disclosure Description: Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://crbug.com/678776 - https://access.redhat.com/errata/RHSA-2017:13
ces: - http://www.securityfocus.com/bid/98861 - https://crbug.com/678776 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5076 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.468Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android Problem Types: Insufficient Policy Enforcement Description: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/719199 - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:
ences: - https://crbug.com/719199 - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5077 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.367Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Problem Types: Out-of-bounds Read Description: Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - https://crbug.com/716311 - http:
p://www.securityfocus.com/bid/98861 - https://access.redhat.com/errata/RHSA-2017:1399 - https://crbug.com/716311 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5078 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.461Z Vendors: n/a Products: Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument. Additional Analyst
n with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98861 - https://crbug.com/711020 - https://access.redhat.com/errata/RHSA-2017:1399 - http://www.securitytracker.com/id/1038622 - https://security.gentoo.org/glsa/201706-20 - https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html