IT

Tracker / CVE-2017-5087

CVE-2017-5087

High 8.8

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.

Affected products and versions

google chrome · … → 59.0.3071.104
google chrome · … → 59.0.3071.117
redhat enterprise_linux_desktop
redhat enterprise_linux_server
redhat enterprise_linux_workstation

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References