Improper input validation in Apple Macos
CVE-2017-5081
Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Apple Macos
- Google Android
- Google Chrome
- Linux Linux_kernel
- Microsoft Windows
- Debian Debian_linux — versions 9.0
- Redhat Enterprise_linux_desktop — versions 6.0
- Redhat Enterprise_linux_server — versions 6.0
- Redhat Enterprise_linux_workstation — versions 6.0
- N/a Google Chrome Prior To 59.0.3071.86 For Mac, Windows And Linux, 59.0.3071.92 Android — versions Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android
Weakness classification (CWE)
References
- chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
- chrome-cve-admin@google.com (x_refsource_REDHAT, vendor-advisory)
- chrome-cve-admin@google.com (x_refsource_MISC)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_SECTRACK)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_GENTOO)
- chrome-cve-admin@google.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-5081?
- CVE-2017-5081 is a low-severity vulnerability in Apple Macos, classified under Improper Input Validation. CVSS score: 3.3/10. Published 2017-10-27.
- How severe is CVE-2017-5081?
- Low severity. CVSS v3 base score is 3.3 out of 10.