Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5105 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.429Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android Problem Types: Insufficient Policy Enforcement Description: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/729979 - https://chromereleases.googleblog.c
01709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/729979 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833
CVE ID: CVE-2017-5106 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.421Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android Problem Types: Insufficient Policy Enforcement Description: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/714628 - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://chromereleases.googleblog.c
/security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833
CVE ID: CVE-2017-5107 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.326Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac Problem Types: User Information Disclosure Description: A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/686253 - https://chromereleases.googleblog.com/2017/07/stab
://www.debian.org/security/2017/dsa-3926 - https://crbug.com/686253 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833
CVE ID: CVE-2017-5108 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.357Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android Problem Types: Type confusion Description: Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/695830 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desk
/2017/dsa-3926 - https://crbug.com/695830 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833
CVE ID: CVE-2017-5109 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.410Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac Problem Types: Inappropriate implementation Description: Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/710400 - https://chromerelease
too.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://crbug.com/710400 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833
CVE ID: CVE-2017-5110 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.503Z Vendors: n/a Products: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android Problem Types: Inappropriate implementation Description: Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://chromereleases
es: - https://security.gentoo.org/glsa/201709-15 - http://www.debian.org/security/2017/dsa-3926 - https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/99950 - https://access.redhat.com/errata/RHSA-2017:1833 - https://crbug.com/717476
CVE ID: CVE-2017-5111 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.465Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac Problem Types: Use after free Description: A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/
- http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html - https://crbug.com/737023
CVE ID: CVE-2017-5112 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.356Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Windows Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - htt
itytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html - https://crbug.com/740603
CVE ID: CVE-2017-5113 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.397Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android Problem Types: Out of bounds write Description: Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://crbug.com/747043 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com
/201709-15 - https://crbug.com/747043 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5114 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.414Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac, and 61.0.3163.81 for Android Problem Types: Inappropriate implementation Description: Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytra
- https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html - https://crbug.com/752829
CVE ID: CVE-2017-5115 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.382Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Windows Problem Types: Type confusion Description: Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/744584 - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-
/www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5116 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.461Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android Problem Types: Type confusion Description: Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.secu
01709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://security.googleblog.com/2018/01/android-security-ecosystem-investments.html - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html - https://crbug.com/759624
CVE ID: CVE-2017-5117 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.422Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Linux and Windows Problem Types: Uninitialized Use Description: Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http
t.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html - https://crbug.com/739190
CVE ID: CVE-2017-5118 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.468Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android Problem Types: Policy bypass Description: Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/747847 - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/
tainer: References: - https://crbug.com/747847 - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5119 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.350Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android Problem Types: Uninitialized Use Description: Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - https://crbug.com/
ces: - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - https://crbug.com/725127 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5120 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.442Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android Problem Types: Inappropriate implementation Description: Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the doma
it cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring). Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/718676 - https://security.gentoo.org/glsa/201709-15 - https://access.redhat.com/errata/RHSA-2017:2676 - http://www.securitytracker.com/id/1039291 - http://www.securityfocus.com/bid/100610 - http://www.debian.org/security/2017/dsa-3985 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2017-5121 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:47:44.402Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.100 for Linux, Windows and Mac Problem Types: Inappropriate implementation Description: Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100947 - https://security.gentoo.org/glsa/201709-25 - https://chromereleases.googleblog.com/2017/09/stabl
yfocus.com/bid/100947 - https://security.gentoo.org/glsa/201709-25 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html - https://blogs.technet.microsoft.com/mmpc/2017/10/18/browser-security-beyond-sandboxing/ - https://access.redhat.com/errata/RHSA-2017:2792 - http://www.securitytracker.com/id/1039497 - https://crbug.com/765433 - http://www.debian.org/security/2017/dsa-3985
CVE ID: CVE-2017-5122 State: PUBLISHED Published: 2017-10-27T05:00:00 Last Updated: 2024-08-05T14:55:34.224Z Vendors: n/a Products: Google Chrome prior to 61.0.3163.100 for Windows Problem Types: Inappropriate implementation Description: Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100947 - https://security.gentoo.org/glsa/201709-25 - https://chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html - https://access.redhat.com/errata/RHSA-
chromereleases.googleblog.com/2017/09/stable-channel-update-for-desktop_21.html - https://access.redhat.com/errata/RHSA-2017:2792 - http://www.securitytracker.com/id/1039497 - http://www.debian.org/security/2017/dsa-3985 - https://crbug.com/752423
CVE ID: CVE-2017-5123 State: PUBLISHED Published: 2021-11-02T22:05:10 Last Updated: 2024-08-05T14:55:35.200Z Vendors: n/a Products: n/a Problem Types: Insufficient data validation Description: Insufficient data validation in waitid allowed an user to escape sandboxes on Linux. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/772848 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51 - https://security.netapp.com/advisory/ntap-20211223-0003/
CVE ID: CVE-2017-5124 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.231Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Inappropriate implementation Description: Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://www.reddit.com/r/netsec/comments/7cus2h/chrome_61_uxss_exploit_cve20175124/ - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://crbug.co
t_cve20175124/ - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://crbug.com/762930 - https://www.debian.org/security/2017/dsa-4020 - https://chromium.googlesource.com/chromium/src/+/4558c2885e618557a674660aff57404d25537070 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24 - https://github.com/Bo0oM/CVE-2017-5124
CVE ID: CVE-2017-5125 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.218Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Heap buffer overflow Description: Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://crbug.com/749147 - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https:
ug.com/749147 - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5126 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.207Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Use after free Description: A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://crbug.com/760455 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://securit
html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5127 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.230Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Use after free Description: Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://crbug.com/765384 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.
ml - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5128 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:34.227Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Heap buffer overflow Description: Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://crbug.
.html - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://crbug.com/765469 - https://security.gentoo.org/glsa/201710-24
CVE ID: CVE-2017-5129 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T14:55:35.591Z Vendors: n/a Products: Google Chrome prior to 62.0.3202.62 Problem Types: Use after free Description: A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101482 - https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html - https://crbug.com/765495 - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - ht
/crbug.com/765495 - https://www.debian.org/security/2017/dsa-4020 - https://access.redhat.com/errata/RHSA-2017:2997 - https://security.gentoo.org/glsa/201710-24