CVE-2017-5124
chromium-browser: Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inje...
CVE-2017-5124 is fixed in 5 products on 1 platform, first by chromium-browser 62.0.3202.62-0ubuntu0.17.10.1380, released February 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0515
92nd percentile
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 | chromium-browser 62.0.3202.62-0ubuntu0.17.10.1380 | Feb 7, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 | chromium-browser-l10n 62.0.3202.62-0ubuntu0.17.10.1380 | Feb 7, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 | chromium-chromedriver 62.0.3202.62-0ubuntu0.17.10.1380 | Feb 7, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 | chromium-codecs-ffmpeg 62.0.3202.62-0ubuntu0.17.10.1380 | Feb 7, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 | chromium-codecs-ffmpeg-extra 62.0.3202.62-0ubuntu0.17.10.1380 | Feb 7, 2018 |