Kaspersky LabKLA11130KLA11130 Denial of service vulnerability in Google Chrome
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.035 Low
EPSS
Percentile
91.4%
Detect date:
10/27/2017
Severity:
High
Description:
An unspecified vulnerability in the V8 component that allows the stack-based buffer to overflow (stack buffer overflow). This vulnerability can be exploited remotely by an unauthenticated attacker to execute arbitrary code and to cause denial of service;
Affected products:
Google Chrome earlier than 62.0.3202.75
Solution:
Update to the latest version
Download Google Chrome
Original advisories:
Stable Channel Update for Desktop
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2017-153964.3Warning
CVE-2017-154066.8High
References
chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop_26.html
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15396
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15406
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/chrome/browser/desktop/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.035 Low
EPSS
Percentile
91.4%