Security Advisory

CVE-2017-5107

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-27 05:00:00

Last updated 2024-08-05 14:47:44

Assigner Chrome

CVSS score not scored

State PUBLISHED

Description

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.

← Browse all CVEs View on cve.org ↗