Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038648 - http://www.securityfocus.com/bid/98968 - http://www.securityfocus.com/archive/1/540693/30/0/threaded
CVE ID: CVE-2017-5005 State: PUBLISHED Published: 2017-01-02T22:00:00 Last Updated: 2024-08-05T14:47:43.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95194 - http://www.securitytracker.com/id/1037547 - https://www.youtube.com/watch?
s: - http://www.securityfocus.com/bid/95194 - http://www.securitytracker.com/id/1037547 - https://www.youtube.com/watch?v=h9LOsv4XE00 - https://github.com/payatu/QuickHeal
CVE ID: CVE-2017-5006 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.105Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: object lifecycle issue Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update
ferences: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/673170 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5007 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.187Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: object lifecycle issue Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stabl
am Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/671102 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5008 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:43.660Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: object lifecycle issue Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/668552 - http://www.securityfocus.com/b
ditional Analyst Notes: - CVE Program Container: References: - https://crbug.com/668552 - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5009 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:43.630Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: heap buffer overflow Description: WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-deskto
http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/667504 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5010 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.140Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://crbug.com/663476 - https://chromereleases.googleblo
iner: References: - http://www.securityfocus.com/bid/95792 - https://crbug.com/663476 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5011 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.092Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Windows Problem Types: insufficient validation of untrusted input Description: Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/g
2 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/662859 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5012 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.164Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: heap buffer overflow Description: A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.
com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/681843 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5013 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.048Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux Problem Types: insufficient policy enforcement Description: Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://
ses.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/677716 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5014 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:43.816Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: heap buffer overflow Description: Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop
http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/675332 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5015 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.112Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-des
: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/673971 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5016 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.292Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chr
e. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/673163 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5017 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:43.995Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Mac Problem Types: information disclosure Description: Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/
https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/676975 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5018 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.147Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - https://crbug.com/668665 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5019 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.050Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: use after free Description: A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/20
tps://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/666714 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5020 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.089Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://crb
e. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://crbug.com/668653 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5021 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.122Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: use after free Description: A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/663726 - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https:/
rityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5022 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.220Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/sta
gram Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/663620 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5023 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.104Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: type confusion Description: Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security
.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - http://www.securitytracker.com/id/1037718 - https://crbug.com/651443 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5024 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.138Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac Problem Types: heap corruption Description: FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn
.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://security.gentoo.org/glsa/201705-05 - https://crbug.com/643951 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5025 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.128Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac Problem Types: heap corruption Description: FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://crbug.com/643950 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/
50 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://security.gentoo.org/glsa/201705-05 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5026 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.140Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac Problem Types: insufficient policy enforcement Description: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.g
om/bid/95792 - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201701-66 - http://rhn.redhat.com/errata/RHSA-2017-0206.html - https://crbug.com/634108 - http://www.securitytracker.com/id/1037718 - http://www.debian.org/security/2017/dsa-3776
CVE ID: CVE-2017-5027 State: PUBLISHED Published: 2017-02-17T07:45:00 Last Updated: 2024-08-05T14:47:44.353Z Vendors: n/a Products: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - htt
gram Container: References: - https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html - https://crbug.com/661126