Vulnerability-Lookup

RHSA-2017:1833

Vulnerability from csaf_redhat - Published: 2017-07-31 14:32 - Updated: 2025-11-21 18:01

Summary

Red Hat Security Advisory: chromium-browser security update

Severity

Important

Notes

Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 60.0.3112.78. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5091, CVE-2017-5092, CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097, CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102, CVE-2017-5103, CVE-2017-5104, CVE-2017-5106, CVE-2017-7000, CVE-2017-5105, CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-5091

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. https://access.redhat.com/errata/RHSA-2017:1833

CVE-2017-5092

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

CVE-2017-5093

Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-223 - Omission of Security-relevant Information

CVE-2017-5094

Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-5095

Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

CVE-2017-5096

Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-5097

Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

CVE-2017-5098

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

CVE-2017-5099

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

CVE-2017-5100

A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2017-5101

Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2017-5102

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2017-5103

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2017-5104

Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2017-5105

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2017-5106

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2017-5108

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CVE-2017-5109

Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2017-5110

Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2017-7000

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

URL

Category

	https://access.redhat.com/errata/RHSA-2017:1833	self
	https://access.redhat.com/security/updates/classi…	external
	https://chromereleases.googleblog.com/2017/07/sta…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475193	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475194	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475195	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475196	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475197	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475198	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475199	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475200	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475201	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475202	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475203	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475204	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475205	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475206	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475207	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475208	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475209	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475210	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475211	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475212	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1475213	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2017-5091	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475193	external
	https://www.cve.org/CVERecord?id=CVE-2017-5091	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5091	external
	https://chromereleases.googleblog.com/2017/07/sta…	external
	https://access.redhat.com/security/cve/CVE-2017-5092	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475194	external
	https://www.cve.org/CVERecord?id=CVE-2017-5092	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5092	external
	https://access.redhat.com/security/cve/CVE-2017-5093	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475195	external
	https://www.cve.org/CVERecord?id=CVE-2017-5093	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5093	external
	https://access.redhat.com/security/cve/CVE-2017-5094	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475196	external
	https://www.cve.org/CVERecord?id=CVE-2017-5094	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5094	external
	https://access.redhat.com/security/cve/CVE-2017-5095	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475197	external
	https://www.cve.org/CVERecord?id=CVE-2017-5095	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5095	external
	https://access.redhat.com/security/cve/CVE-2017-5096	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475198	external
	https://www.cve.org/CVERecord?id=CVE-2017-5096	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5096	external
	https://access.redhat.com/security/cve/CVE-2017-5097	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475199	external
	https://www.cve.org/CVERecord?id=CVE-2017-5097	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5097	external
	https://access.redhat.com/security/cve/CVE-2017-5098	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475200	external
	https://www.cve.org/CVERecord?id=CVE-2017-5098	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5098	external
	https://access.redhat.com/security/cve/CVE-2017-5099	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475201	external
	https://www.cve.org/CVERecord?id=CVE-2017-5099	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5099	external
	https://access.redhat.com/security/cve/CVE-2017-5100	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475202	external
	https://www.cve.org/CVERecord?id=CVE-2017-5100	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5100	external
	https://access.redhat.com/security/cve/CVE-2017-5101	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475203	external
	https://www.cve.org/CVERecord?id=CVE-2017-5101	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5101	external
	https://access.redhat.com/security/cve/CVE-2017-5102	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475204	external
	https://www.cve.org/CVERecord?id=CVE-2017-5102	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5102	external
	https://access.redhat.com/security/cve/CVE-2017-5103	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475205	external
	https://www.cve.org/CVERecord?id=CVE-2017-5103	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5103	external
	https://access.redhat.com/security/cve/CVE-2017-5104	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475206	external
	https://www.cve.org/CVERecord?id=CVE-2017-5104	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5104	external
	https://access.redhat.com/security/cve/CVE-2017-5105	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475208	external
	https://www.cve.org/CVERecord?id=CVE-2017-5105	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5105	external
	https://access.redhat.com/security/cve/CVE-2017-5106	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475209	external
	https://www.cve.org/CVERecord?id=CVE-2017-5106	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5106	external
	https://access.redhat.com/security/cve/CVE-2017-5107	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475210	external
	https://www.cve.org/CVERecord?id=CVE-2017-5107	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5107	external
	https://access.redhat.com/security/cve/CVE-2017-5108	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475211	external
	https://www.cve.org/CVERecord?id=CVE-2017-5108	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5108	external
	https://access.redhat.com/security/cve/CVE-2017-5109	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475212	external
	https://www.cve.org/CVERecord?id=CVE-2017-5109	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5109	external
	https://access.redhat.com/security/cve/CVE-2017-5110	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475213	external
	https://www.cve.org/CVERecord?id=CVE-2017-5110	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-5110	external
	https://access.redhat.com/security/cve/CVE-2017-7000	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1475207	external
	https://www.cve.org/CVERecord?id=CVE-2017-7000	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-7000	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 60.0.3112.78.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5091, CVE-2017-5092, CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096, CVE-2017-5097, CVE-2017-5098, CVE-2017-5099, CVE-2017-5100, CVE-2017-5101, CVE-2017-5102, CVE-2017-5103, CVE-2017-5104, CVE-2017-5106, CVE-2017-7000, CVE-2017-5105, CVE-2017-5107, CVE-2017-5108, CVE-2017-5109, CVE-2017-5110)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:1833",
        "url": "https://access.redhat.com/errata/RHSA-2017:1833"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
        "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
      },
      {
        "category": "external",
        "summary": "1475193",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475193"
      },
      {
        "category": "external",
        "summary": "1475194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475194"
      },
      {
        "category": "external",
        "summary": "1475195",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475195"
      },
      {
        "category": "external",
        "summary": "1475196",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475196"
      },
      {
        "category": "external",
        "summary": "1475197",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475197"
      },
      {
        "category": "external",
        "summary": "1475198",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475198"
      },
      {
        "category": "external",
        "summary": "1475199",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475199"
      },
      {
        "category": "external",
        "summary": "1475200",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475200"
      },
      {
        "category": "external",
        "summary": "1475201",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475201"
      },
      {
        "category": "external",
        "summary": "1475202",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475202"
      },
      {
        "category": "external",
        "summary": "1475203",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475203"
      },
      {
        "category": "external",
        "summary": "1475204",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475204"
      },
      {
        "category": "external",
        "summary": "1475205",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475205"
      },
      {
        "category": "external",
        "summary": "1475206",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475206"
      },
      {
        "category": "external",
        "summary": "1475207",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475207"
      },
      {
        "category": "external",
        "summary": "1475208",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475208"
      },
      {
        "category": "external",
        "summary": "1475209",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475209"
      },
      {
        "category": "external",
        "summary": "1475210",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475210"
      },
      {
        "category": "external",
        "summary": "1475211",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475211"
      },
      {
        "category": "external",
        "summary": "1475212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475212"
      },
      {
        "category": "external",
        "summary": "1475213",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475213"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1833.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2025-11-21T18:01:26+00:00",
      "generator": {
        "date": "2025-11-21T18:01:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2017:1833",
      "initial_release_date": "2017-07-31T14:32:00+00:00",
      "revision_history": [
        {
          "date": "2017-07-31T14:32:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-07-31T14:32:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T18:01:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@60.0.3112.78-1.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
                "product": {
                  "name": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
                  "product_id": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@60.0.3112.78-1.el6_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
                "product": {
                  "name": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
                  "product_id": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@60.0.3112.78-1.el6_9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
                  "product_id": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@60.0.3112.78-1.el6_9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-5091",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475193"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in indexeddb",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5091"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475193",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475193"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5091",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5091"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5091",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5091"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in indexeddb"
    },
    {
      "cve": "CVE-2017-5092",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in ppapi",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5092"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5092",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5092"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5092",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5092"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in ppapi"
    },
    {
      "cve": "CVE-2017-5093",
      "cwe": {
        "id": "CWE-223",
        "name": "Omission of Security-relevant Information"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: ui spoofing in blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5093"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5093",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5093"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5093",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5093"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: ui spoofing in blink"
    },
    {
      "cve": "CVE-2017-5094",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475196"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: type confusion in extensions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5094"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475196",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475196"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5094",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5094"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5094",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5094"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: type confusion in extensions"
    },
    {
      "cve": "CVE-2017-5095",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475197"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out-of-bounds write in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5095"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475197",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475197"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5095",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5095"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5095",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5095"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out-of-bounds write in pdfium"
    },
    {
      "cve": "CVE-2017-5096",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475198"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: user information leak via android intents",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5096"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475198",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475198"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5096"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: user information leak via android intents"
    },
    {
      "cve": "CVE-2017-5097",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475199"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out-of-bounds read in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5097"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475199",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475199"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5097",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5097"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5097",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5097"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out-of-bounds read in skia"
    },
    {
      "cve": "CVE-2017-5098",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475200"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in v8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5098"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475200",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475200"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5098",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5098"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5098",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5098"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: use after free in v8"
    },
    {
      "cve": "CVE-2017-5099",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: out-of-bounds write in ppapi",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5099"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5099",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5099"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5099",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5099"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: out-of-bounds write in ppapi"
    },
    {
      "cve": "CVE-2017-5100",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475202"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: use after free in chrome apps",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5100"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475202",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475202"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5100",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5100"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5100",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5100"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: use after free in chrome apps"
    },
    {
      "cve": "CVE-2017-5101",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475203"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5101"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475203",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475203"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5101",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5101"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5101",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5101"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: url spoofing in omnibox"
    },
    {
      "cve": "CVE-2017-5102",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: uninitialized use in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5102"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5102",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5102"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5102",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5102"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: uninitialized use in skia"
    },
    {
      "cve": "CVE-2017-5103",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475205"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: uninitialized use in skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5103"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475205",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475205"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5103",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5103"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5103",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5103"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: uninitialized use in skia"
    },
    {
      "cve": "CVE-2017-5104",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: ui spoofing in browser",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5104"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5104"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5104",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5104"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: ui spoofing in browser"
    },
    {
      "cve": "CVE-2017-5105",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5105"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5105",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5105"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5105",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5105"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: url spoofing in omnibox"
    },
    {
      "cve": "CVE-2017-5106",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: url spoofing in omnibox",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5106"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5106",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5106"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5106",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5106"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: url spoofing in omnibox"
    },
    {
      "cve": "CVE-2017-5107",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475210"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe\u0027d via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: user information leak via svg",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5107"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475210",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475210"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5107",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5107"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5107",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5107"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: user information leak via svg"
    },
    {
      "cve": "CVE-2017-5108",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475211"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: type confusion in pdfium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5108"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475211",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475211"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5108",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5108"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5108",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5108"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: type confusion in pdfium"
    },
    {
      "cve": "CVE-2017-5109",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: ui spoofing in browser",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5109"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5109",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5109"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5109",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5109"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: ui spoofing in browser"
    },
    {
      "cve": "CVE-2017-5110",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475213"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: ui spoofing in payments dialog",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5110"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475213",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475213"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5110",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5110"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5110",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5110"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: ui spoofing in payments dialog"
    },
    {
      "cve": "CVE-2017-7000",
      "discovery_date": "2017-07-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1475207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: pointer disclosure in sqlite",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
          "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-7000"
        },
        {
          "category": "external",
          "summary": "RHBZ#1475207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-7000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7000"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        }
      ],
      "release_date": "2017-07-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-31T14:32:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Client-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Server-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-0:60.0.3112.78-1.el6_9.x86_64",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.i686",
            "6Workstation-Supplementary-6.9.z:chromium-browser-debuginfo-0:60.0.3112.78-1.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: pointer disclosure in sqlite"
    }
  ]
}

CVE-2017-5108 (GCVE-0-2017-5108)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.

Severity ?

No CVSS data available.

CWE

Type confusion

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://crbug.com/695830	x_refsource_MISC
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.357Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/695830"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Type confusion",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/695830"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5108",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Type confusion"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://crbug.com/695830",
              "refsource": "MISC",
              "url": "https://crbug.com/695830"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5108",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.357Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5109 (GCVE-0-2017-5109)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Inappropriate implementation

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://crbug.com/710400	x_refsource_MISC
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.410Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/710400"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/710400"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5109",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Inappropriate implementation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://crbug.com/710400",
              "refsource": "MISC",
              "url": "https://crbug.com/710400"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5109",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.410Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5102 (GCVE-0-2017-5102)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Uninitialized Use

Assigner

Chrome

References

URL

Tags

	https://crbug.com/727678	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.399Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/727678"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Uninitialized Use",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/727678"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5102",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Uninitialized Use"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/727678",
              "refsource": "MISC",
              "url": "https://crbug.com/727678"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5102",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.399Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7000 (GCVE-0-2017-7000)

Vulnerability from cvelistv5 – Published: 2018-04-03 06:00 – Updated: 2024-08-05 15:49

Summary

Severity ?

No CVSS data available.

CWE

Assigner

apple

References

URL

Tags

	https://support.apple.com/HT207797	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.securityfocus.com/bid/98767	vdb-entryx_refsource_BID
	https://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://support.apple.com/HT207798	x_refsource_CONFIRM

Date Public ?

2018-03-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:49:02.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT207797"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "98767",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98767"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3926"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT207798"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-03T09:57:01.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT207797"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "98767",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98767"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3926"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT207798"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2017-7000",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT207797",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT207797"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "98767",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98767"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://support.apple.com/HT207798",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT207798"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2017-7000",
    "datePublished": "2018-04-03T06:00:00.000Z",
    "dateReserved": "2017-03-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:49:02.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5091 (GCVE-0-2017-5091)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Use after free

Assigner

Chrome

References

URL

Tags

	https://crbug.com/728887	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.464Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/728887"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use after free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/728887"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5091",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use after free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/728887",
              "refsource": "MISC",
              "url": "https://crbug.com/728887"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5091",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.464Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5092 (GCVE-0-2017-5092)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Insufficient validation of untrusted input

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://crbug.com/733549	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Windows	Affected: Google Chrome prior to 60.0.3112.78 for Windows

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.432Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/733549"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Windows",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Windows"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient validation of untrusted input",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/733549"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5092",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Windows"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient validation of untrusted input"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://crbug.com/733549",
              "refsource": "MISC",
              "url": "https://crbug.com/733549"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5092",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.432Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5105 (GCVE-0-2017-5105)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Insufficient Policy Enforcement

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://crbug.com/729979	x_refsource_MISC
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.429Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/729979"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient Policy Enforcement",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/729979"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5105",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient Policy Enforcement"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://crbug.com/729979",
              "refsource": "MISC",
              "url": "https://crbug.com/729979"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5105",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5107 (GCVE-0-2017-5107)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

User Information Disclosure

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://crbug.com/686253	x_refsource_MISC
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/686253"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe\u0027d via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "User Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/686253"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe\u0027d via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "User Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://crbug.com/686253",
              "refsource": "MISC",
              "url": "https://crbug.com/686253"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5107",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5100 (GCVE-0-2017-5100)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Use after free

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://crbug.com/718292	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Windows	Affected: Google Chrome prior to 60.0.3112.78 for Windows

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.335Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/718292"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Windows",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Windows"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use after free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/718292"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5100",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Windows"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use after free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://crbug.com/718292",
              "refsource": "MISC",
              "url": "https://crbug.com/718292"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5100",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5098 (GCVE-0-2017-5098)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Use after free

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://crbug.com/740803	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.465Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/740803"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use after free",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/740803"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5098",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use after free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://crbug.com/740803",
              "refsource": "MISC",
              "url": "https://crbug.com/740803"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5098",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5101 (GCVE-0-2017-5101)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Inappropriate implementation

Assigner

Chrome

References

URL

Tags

	https://crbug.com/681740	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.347Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/681740"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/681740"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5101",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Inappropriate implementation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/681740",
              "refsource": "MISC",
              "url": "https://crbug.com/681740"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5101",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5097 (GCVE-0-2017-5097)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Out-of-bounds Read

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	https://crbug.com/740789	x_refsource_MISC
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux	Affected: Google Chrome prior to 60.0.3112.78 for Linux

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/740789"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/740789"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5097",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "https://crbug.com/740789",
              "refsource": "MISC",
              "url": "https://crbug.com/740789"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5097",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5095 (GCVE-0-2017-5095)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.

Severity ?

No CVSS data available.

CWE

Stack overflow

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://crbug.com/732661	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.381Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/732661"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/732661"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Stack overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://crbug.com/732661",
              "refsource": "MISC",
              "url": "https://crbug.com/732661"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5095",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5096 (GCVE-0-2017-5096)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Insufficient Policy Enforcement

Assigner

Chrome

References

URL

Tags

	https://crbug.com/714442	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Android	Affected: Google Chrome prior to 60.0.3112.78 for Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/714442"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient Policy Enforcement",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/714442"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5096",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient Policy Enforcement"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/714442",
              "refsource": "MISC",
              "url": "https://crbug.com/714442"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5096",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.467Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5099 (GCVE-0-2017-5099)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Insufficient validation of untrusted input

Assigner

Chrome

References

URL

Tags

	https://crbug.com/733548	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac	Affected: Google Chrome prior to 60.0.3112.78 for Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/733548"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient validation of untrusted input",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/733548"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5099",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient validation of untrusted input"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/733548",
              "refsource": "MISC",
              "url": "https://crbug.com/733548"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5099",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5110 (GCVE-0-2017-5110)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Inappropriate implementation

Assigner

Chrome

References

URL

Tags

	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT
	https://crbug.com/717476	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.503Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/717476"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/717476"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5110",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Inappropriate implementation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            },
            {
              "name": "https://crbug.com/717476",
              "refsource": "MISC",
              "url": "https://crbug.com/717476"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5110",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5093 (GCVE-0-2017-5093)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Inappropriate implementation

Assigner

Chrome

References

URL

Tags

	https://crbug.com/550017	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.362Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/550017"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/550017"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5093",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Inappropriate implementation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/550017",
              "refsource": "MISC",
              "url": "https://crbug.com/550017"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5093",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5104 (GCVE-0-2017-5104)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.

Severity ?

No CVSS data available.

CWE

Inappropriate implementation

Assigner

Chrome

References

URL

Tags

	https://crbug.com/729105	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac	Affected: Google Chrome prior to 60.0.3112.78 for Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.393Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/729105"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/729105"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5104",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Inappropriate implementation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/729105",
              "refsource": "MISC",
              "url": "https://crbug.com/729105"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5104",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5106 (GCVE-0-2017-5106)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Insufficient Policy Enforcement

Assigner

Chrome

References

URL

Tags

	https://crbug.com/714628	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.421Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/714628"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient Policy Enforcement",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/714628"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5106",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Insufficient Policy Enforcement"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/714628",
              "refsource": "MISC",
              "url": "https://crbug.com/714628"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5106",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5103 (GCVE-0-2017-5103)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Uninitialized Use

Assigner

Chrome

References

URL

Tags

	https://crbug.com/726199	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac	Affected: Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.353Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/726199"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Uninitialized Use",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/726199"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5103",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Uninitialized Use"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/726199",
              "refsource": "MISC",
              "url": "https://crbug.com/726199"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5103",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5094 (GCVE-0-2017-5094)

Vulnerability from cvelistv5 – Published: 2017-10-27 05:00 – Updated: 2024-08-05 14:47

Summary

Severity ?

No CVSS data available.

CWE

Type Confusion

Assigner

Chrome

References

URL

Tags

	https://crbug.com/702946	x_refsource_MISC
	https://security.gentoo.org/glsa/201709-15	vendor-advisoryx_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3926	vendor-advisoryx_refsource_DEBIAN
	https://chromereleases.googleblog.com/2017/07/sta…	x_refsource_MISC
	http://www.securityfocus.com/bid/99950	vdb-entryx_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1833	vendor-advisoryx_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android	Affected: Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Date Public ?

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:44.519Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/702946"
          },
          {
            "name": "GLSA-201709-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-15"
          },
          {
            "name": "DSA-3926",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3926"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
          },
          {
            "name": "99950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99950"
          },
          {
            "name": "RHSA-2017:1833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1833"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Type Confusion",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/702946"
        },
        {
          "name": "GLSA-201709-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-15"
        },
        {
          "name": "DSA-3926",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3926"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
        },
        {
          "name": "99950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99950"
        },
        {
          "name": "RHSA-2017:1833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1833"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2017-5094",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Type Confusion"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://crbug.com/702946",
              "refsource": "MISC",
              "url": "https://crbug.com/702946"
            },
            {
              "name": "GLSA-201709-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-15"
            },
            {
              "name": "DSA-3926",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3926"
            },
            {
              "name": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html"
            },
            {
              "name": "99950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99950"
            },
            {
              "name": "RHSA-2017:1833",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1833"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2017-5094",
    "datePublished": "2017-10-27T05:00:00.000Z",
    "dateReserved": "2017-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:47:44.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2017:1833

CVE-2017-5108 (GCVE-0-2017-5108)

CVE-2017-5109 (GCVE-0-2017-5109)

CVE-2017-5102 (GCVE-0-2017-5102)

CVE-2017-7000 (GCVE-0-2017-7000)

CVE-2017-5091 (GCVE-0-2017-5091)

CVE-2017-5092 (GCVE-0-2017-5092)

CVE-2017-5105 (GCVE-0-2017-5105)

CVE-2017-5107 (GCVE-0-2017-5107)

CVE-2017-5100 (GCVE-0-2017-5100)

CVE-2017-5098 (GCVE-0-2017-5098)

CVE-2017-5101 (GCVE-0-2017-5101)

CVE-2017-5097 (GCVE-0-2017-5097)

CVE-2017-5095 (GCVE-0-2017-5095)

CVE-2017-5096 (GCVE-0-2017-5096)

CVE-2017-5099 (GCVE-0-2017-5099)

CVE-2017-5110 (GCVE-0-2017-5110)

CVE-2017-5093 (GCVE-0-2017-5093)

CVE-2017-5104 (GCVE-0-2017-5104)

CVE-2017-5106 (GCVE-0-2017-5106)

CVE-2017-5103 (GCVE-0-2017-5103)

CVE-2017-5094 (GCVE-0-2017-5094)

Tags

Sightings

Nomenclature