CVE-2017-5017 Information disclosure in Google Chrome prior to 56.0.2924.76 for Mac
Remote attackers can extract image fragments from video memory on specific Mac systems via crafted HTML pages in Google Chrome.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-5017?
CVE-2017-5017 is a medium-severity vulnerability in Google Chrome, published on 17 Feb 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.
Weakness: CWE-200
Which versions are affected by CVE-2017-5017?
It affects 1 product.
Products include Google Chrome.
How do I fix CVE-2017-5017?
Upgrade to a fixed version.
Is CVE-2017-5017 being exploited?
There is no known exploitation of CVE-2017-5017 in the wild and no public exploit code.
Other vulnerabilities in Google Chrome
Sources
Also known as GHSA-96x2-252g-x7vc, UBUNTU-CVE-2017-5017.