Skip to content
OpenAdvisories
Unscored CVE-2020-6417 EUVD-2020-27567GHSA-v7x5-7rf4-h5f6

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a c…

Published Feb 11, 2020 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 80.0.3987.87 80.0.3987.87

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 80.0.3987.87-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 80.0.3987.87-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 80.0.3987.87-1.el6_10 RHSA-2020:0514
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP1 chromium 80.0.3987.87-bp151.3.59.1 openSUSE-SU-2020:0210-1
SUSE Package Hub 12 SP3 chromium 80.0.3987.87-31.1 openSUSE-SU-2020:0233-1
SUSE Package Hub 12 SP3 re2 20200101-25.1 openSUSE-SU-2020:0233-1
SUSE Package Hub 12 chromium 80.0.3987.87-31.1 openSUSE-SU-2020:0233-1
SUSE Package Hub 12 re2 20200101-25.1 openSUSE-SU-2020:0233-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.1 chromium 80.0.3987.87-lp151.2.63.1 openSUSE-SU-2020:0189-1

Advisories 6

References