CVE-2017-5084
Fixed in a distro release EPSS <1%
Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbus-send commands to a BurnImage D-Bus endpoint.
Products: google chrome_os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 14.04 LTS | chromium-browser | 59.0.3071.109-0ubuntu0.14.04.1186 |
| Ubuntu 16.04 LTS | chromium-browser | 59.0.3071.109-0ubuntu0.16.04.1289 |
| Ubuntu 16.04 LTS | oxide-qt | no fix |