Heap-based buffer overflow in Google Chrome - CVE-2017-5130

Vulnerability identifier: #VU8929

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5130

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to heap-based buffer overflow in libxml2. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability may result in system compromise.

Google Chrome
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Fedora
Oracle HTTP Server
System x Integrated Management Module (IMM2)
Flex System Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)
Integrated Management Module II (IMM2) for BladeCenter Systems
IBM Flex System Fabric EN4093R 10Gb Scalable Switch
IBM Flex System EN2092 1Gb Ethernet Scalable Switch
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch
Flex System Fabric CN4093 10Gb ScSE firmware
chromium

Update to version 62.0.3202.62.

Google Chrome - update to 62.0.3202.62
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
IBM Flex System Fabric EN4093R 10Gb Scalable Switch - update to 7.8.20.00
IBM Flex System EN2092 1Gb Ethernet Scalable Switch - update to 7.8.20.00
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch - update to 7.8.20.00
Flex System Fabric CN4093 10Gb ScSE firmware - update to 7.8.20.00
chromium - addressed in versions 62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26

• https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html

• Multiple vulnerabilities in Google Chrome
• Arch Linux update for chromium
• OpenSUSE Linux update for chromium
• OpenSUSE Linux update for chromium
• Red Hat update for chromium-browser
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Multiple vulnerabilities in IBM Flex System switch firmware products
• Fedora 27 update for chromium
• Fedora 26 update for chromium
• Fedora 25 update for chromium
• Fedora 27 update for chromium
• Fedora 26 update for chromium
• Fedora 25 update for chromium
• Fedora 26 update for chromium
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)