high8.8
CVE-2017-5052
An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allo…
Impact
An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 57.0.2987.133 before 57.0.2987.132 | |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Server | Version 6.0 |
| Redhat | Enterprise Linux Workstation | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97220
- https://access.redhat.com/errata/RHSA-2017:0860
- https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html
- https://crbug.com/662767
- https://security.gentoo.org/glsa/201704-02
- http://www.securityfocus.com/bid/97220
- https://access.redhat.com/errata/RHSA-2017:0860
- https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html
- https://crbug.com/662767
- https://security.gentoo.org/glsa/201704-02