7.5
CVE-2017-5068
- EPSS 1.02%
- Veröffentlicht 27.10.2017 05:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle chrome-cve-admin@google.com
- CVE-Watchlists
- Unerledigt
LoginIncorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Linux Desktop Version6.0
Redhat ≫ Enterprise Linux Server Version6.0
Redhat ≫ Enterprise Linux Workstation Version6.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.02% | 0.588 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5.1 | 4.9 | 6.4 |
AV:N/AC:H/Au:N/C:P/I:P/A:P
|
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
http://www.securityfocus.com/bid/98288
https://access.redhat.com/errata/RHSA-2017:1228
https://chromereleases.googleblog.com/2017/05/stable-channel-update-for-desktop.html
https://crbug.com/679306
https://security.gentoo.org/glsa/201706-20