CVE-2017-7000

chromium-browser: An issue was discovered in certain Apple products

CVE-2017-7000 is fixed in 5 products on 1 platform, first by chromium-browser 61.0.3163.100-0ubuntu1.1378, released April 2, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0302
87th percentile

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Where it's fixed

ProductFixed inFixReleased
Linux
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 61.0.3163.100-0ubuntu1.1378 chromium-browser 61.0.3163.100-0ubuntu1.1378 Apr 2, 2018
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 61.0.3163.100-0ubuntu1.1378 chromium-browser-l10n 61.0.3163.100-0ubuntu1.1378 Apr 2, 2018
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 61.0.3163.100-0ubuntu1.1378 chromium-chromedriver 61.0.3163.100-0ubuntu1.1378 Apr 2, 2018
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 61.0.3163.100-0ubuntu1.1378 chromium-codecs-ffmpeg 61.0.3163.100-0ubuntu1.1378 Apr 2, 2018
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 61.0.3163.100-0ubuntu1.1378 chromium-codecs-ffmpeg-extra 61.0.3163.100-0ubuntu1.1378 Apr 2, 2018