CVE-2017-5042

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed…

published April 24, 2017

CVSS
—
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 29.0th percentile
Published
2017-04-24T23:00Z
EPSS history
Timeline
  • 24 APR 23:00Z
    Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed…
    cvelistv5