UXSS Vulnerability in Google Chrome Affects Multiple Platforms
CVE-2017-5007

6.1MEDIUM

Key Information:

Vendor: Google
Status: Google Chrome Prior To 56.0.2924.76 For Linux, Windows And Mac, And 56.0.2924.87 For Android
Vendor: CVE Published:; 17 February 2017

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2017-5007?

An issue in Google Chrome versions prior to 56.0.2924.76 for Linux, Windows, and Mac, and 56.0.2924.87 for Android, allowed attackers to exploit improper event handling during page closure. This could lead to remote injection of arbitrary scripts or HTML, compromising user data and session integrity through unauthorized access to web applications.

Affected Version(s)

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2017-5007
Created by Ang-YC