Integer Overflow Vulnerability in Google Chrome's XSLT Processing
CVE-2017-5029

8.8HIGH

Key Information:

Vendor: Google
Status: Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android
Vendor: CVE Published:; 24 April 2017

What is CVE-2017-5029?

The xsltAddTextString function in libxslt version 1.1.29, utilized by Google Chrome prior to specific versions, was susceptible to an integer overflow during size calculations. This flaw permitted remote attackers to exploit crafted HTML pages to initiate out of bounds memory writes. Such vulnerabilities can lead to severe outcomes, including remote code execution, highlighting the need for timely updates and security patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android