VDB
CVE-2017-5042
CVE-2017-5042
PUBLISHED
CVSS 5.699999809265137 MEDIUM
Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.
EPSS 0.36% · 27.3th percentile
Risk Scores
CVSS 3.0
5.699999809265137
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.36%
27.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | chromium-browser | 53.0.2785.143-0ubuntu0.14.04.1.1142, 45.0.2454.101-0ubuntu0.14.04.1.1099, 47.0.2526.73-0ubuntu0.14.04.1.1106 |
| Ubuntu:16.04:LTS | chromium-browser | 47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221, 48.0.2564.82-0ubuntu1.1222 |
Timeline
- Mar 10, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 1, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Nov 9, 2022 EPSS Score
- Jan 11, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-5042 third-party-advisory
- https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-5042 third-party-advisory