Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5028 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T14:47:44.388Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/653555 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5029 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.300Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.
write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5 - http://www.securitytracker.com/id/1038157 - https://crbug.com/676623 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5030 State: PUBLISHED Published: 2017-04-24T23:00:00.000Z Last Updated: 2025-10-21T23:55:41.948Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android Problem Types: heap buffer overflow Description: Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.o
nces: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/682194 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html - https://www.zerodayinitiative.com/advisories/ZDI-20-126/
CVE ID: CVE-2017-5031 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.399Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Use after free in ANGLE Description: A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1328762 - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/682020 - http://www.debian.org/security/2017/dsa-3810
2 - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/682020 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - https://www.mozilla.org/security/advisories/mfsa2017-14/ - http://rhn.redhat.com/errata/RHSA-2017-0499.html - http://www.securityfocus.com/bid/98326
CVE ID: CVE-2017-5032 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.369Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Windows Problem Types: heap buffer overflow Description: PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfoc
tml - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html - https://crbug.com/668724
CVE ID: CVE-2017-5033 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.424Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/s
eyword. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://twitter.com/Ma7h1as/status/907641276434063361 - https://crbug.com/669086 - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5034 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.304Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Linux and Windows Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http
gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - https://crbug.com/678461 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5035 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.349Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Windows and Mac Problem Types: incorrect security UI Description: Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/688425 - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bi
ps://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5036 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.415Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/691371 - htt
/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/691371 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5037 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.423Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa
https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - https://crbug.com/679640 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5038 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.368Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac Problem Types: use after free Description: Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/695476 - http://www.debia
annel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/695476 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5039 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.345Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org
.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html - https://crbug.com/679649
CVE ID: CVE-2017-5040 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.307Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: information disclosure Description: V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.de
ogleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html - https://crbug.com/691323
CVE ID: CVE-2017-5041 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.430Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.100 Problem Types: incorrect security UI Description: Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/642490 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.co
g/glsa/201704-02 - https://crbug.com/642490 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5042 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.398Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: insufficient policy enforcement Description: Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update
nalyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/671932 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5043 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.380Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac Problem Types: use after free Description: Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-381
annel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html - https://crbug.com/683523
CVE ID: CVE-2017-5044 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.517Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: heap buffer overflow Description: Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/20
tps://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/688987 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5045 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.411Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: information disclosure Description: XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.o
nces: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - https://crbug.com/667079 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5046 State: PUBLISHED Published: 2017-04-24T23:00:00 Last Updated: 2024-08-05T14:47:44.392Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: insufficient policy enforcement Description: V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
E Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201704-02 - https://crbug.com/680409 - http://www.debian.org/security/2017/dsa-3810 - http://www.securityfocus.com/bid/96767 - http://rhn.redhat.com/errata/RHSA-2017-0499.html
CVE ID: CVE-2017-5047 State: PUBLISHED Published: 2017-04-25T03:23:00 Last Updated: 2024-08-05T14:47:44.383Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/679653
CVE ID: CVE-2017-5048 State: PUBLISHED Published: 2017-04-25T03:23:00 Last Updated: 2024-08-05T14:47:44.395Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/679647
CVE ID: CVE-2017-5049 State: PUBLISHED Published: 2017-04-25T03:23:00 Last Updated: 2024-08-05T14:47:44.285Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/679646
CVE ID: CVE-2017-5050 State: PUBLISHED Published: 2017-04-25T03:23:00 Last Updated: 2024-08-05T14:47:44.308Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/679645
CVE ID: CVE-2017-5051 State: PUBLISHED Published: 2017-04-25T03:23:00 Last Updated: 2024-08-05T14:47:44.402Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Problem Types: integer overflow Description: An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html - https://crbug.com/679641
CVE ID: CVE-2017-5052 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.303Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.133 for Mac, Windows and Linux, and 57.0.2987.132 for Android Problem Types: Inappropriate implementation Description: An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html - https://crbug.com/662767
CVE ID: CVE-2017-5053 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.310Z Vendors: n/a Products: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android Problem Types: Out-of-bounds Read Description: An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://secu
r: References: - http://www.securityfocus.com/bid/97220 - https://access.redhat.com/errata/RHSA-2017:0860 - https://security.gentoo.org/glsa/201704-02 - https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html - http://zerodayinitiative.com/advisories/ZDI-17-462/ - https://crbug.com/702058