CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a…

published October 27, 2017

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01652 · 76.4th percentile
Published
2017-10-27T05:00Z
EPSS history
Timeline
  • 27 OCT 05:00Z
    A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a…
    cvelistv5