CVE-2017-15400

7.8HIGH

Key Information:

Vendor
Google
Status
Google Chrome Os Prior To 62.0.3202.74
Vendor
CVE Published:
7 February 2018

Summary

Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.

Affected Version(s)

Google Chrome OS prior to 62.0.3202.74 Google Chrome OS prior to 62.0.3202.74

References

https://www.debian.org/security/2018/dsa-4243
vendor-advisoryx_refsource_DEBIAN
https://chromereleases.googleblog.com/2017/10/stable-chan...
x_refsource_MISC
https://crbug.com/777215
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.