CVE-2017-15387 | BDVDB-2026-96170 Detail

Google Chrome prior to 62.0.3202.62

Description#

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/101482
https://crbug.com/756040
https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
https://www.debian.org/security/2017/dsa-4020
https://access.redhat.com/errata/RHSA-2017:2997
https://security.gentoo.org/glsa/201710-24

Exploit#

No public exploit known

History#

Version 12018-02-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.