Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-5096
HistoryOct 27, 2017 - 12:00 a.m.

CVE-2017-5096

2017-10-2700:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS

0.005

Percentile

75.6%

Insufficient policy enforcement during navigation between different schemes
in Google Chrome prior to 60.0.3112.78 for Android allowed a remote
attacker to perform cross origin content download via a crafted HTML page,
related to intents.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchchromium-browser< 60.0.3112.78-0ubuntu1.1363UNKNOWN
ubuntu18.04noarchchromium-browser< 60.0.3112.78-0ubuntu1.1363UNKNOWN
ubuntu18.10noarchchromium-browser< 60.0.3112.78-0ubuntu1.1363UNKNOWN
ubuntu14.04noarchchromium-browser< 60.0.3112.78-0ubuntu0.14.04.1190UNKNOWN
ubuntu16.04noarchchromium-browser< 60.0.3112.78-0ubuntu0.16.04.1293UNKNOWN
ubuntu17.04noarchchromium-browser< 60.0.3112.78-0ubuntu0.17.04.1363UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS

0.005

Percentile

75.6%