Unscored CVE-2017-15403 EUVD-2017-6856GHSA-4wfv-vf72-f6xj

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome O…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.

Affected products

Vendor	Product	Affected	Fixed
Google	Chrome	unspecified – < 61.0.3163.113	61.0.3163.113

References

https://crbug.com/766271
https://chromereleases.googleblog.com/2017/10/stable-channel-updates-for-chrome-os.html