Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2017-02-17T07:45:00
Updated: 2024-08-05T14:47:44.092Z
Reserved: 2017-01-02T00:00:00
Link: CVE-2017-5011
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-02-17T07:59:00.370
Modified: 2023-11-07T02:48:27.940
Link: CVE-2017-5011
Redhat