CVE-2017-5115
High · 8.8CVSS
8.8
EPSS
26.3%
Published
Oct 27, 2017
CISA due date
—
The record
Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:9 | chromium-browser | 0 | 61.0.3163.100-1~deb9u1 |
| Mageia:6 | chromium-browser-stable | 0 | 62.0.3202.94-1.mga6 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:61.0.3163.79-2.el6_9 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:61.0.3163.79-2.el6_9 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 61.0.3163.79-29.1 |
| Ubuntu:14.04:LTS | chromium-browser | 0 | 61.0.3163.100-0ubuntu0.14.04.1202 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 61.0.3163.100-0ubuntu0.16.04.1306 |
| Ubuntu:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 61.0.3163.100-0ubuntu1.1378 |
| Ubuntu:18.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | libv8-3.14 | 0 | No fix |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
Related vulnerabilities
- CVE-2018-6156 Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75… Also affects chromium-browser
- CVE-2018-6126 A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote… Also affects chromium-browser
- CVE-2017-15428 Insufficient data validation in V8 builtins string generator could lead to out of bounds… Also affects chromium-browser
- CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome… Also affects chromium-browser
- CVE-2018-17480 Execution of user supplied Javascript during array deserialization leading to an out of… Also affects chromium-browser
- CVE-2018-6065 Integer overflow in computing the required allocation size when instantiating a new… Also affects chromium-browser
- CVE-2018-17463 Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a… Also affects chromium-browser
- CVE-2017-5116 Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux… Also affects chromium-browser