Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-15405

Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root pr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Chrome

Description

Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Chrome

  • unspecified to < 61.0.3163.113affected

References