OVAL Reference oval:com.ubuntu.bionic:def:201817472000

Oval Definition:

oval:com.ubuntu.bionic:def:201817472000

Revision Date:	2018-11-14	Version:	1
Title:	CVE-2018-17472 on Ubuntu 18.04 LTS (bionic) - medium.
Description:	Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the sandbox via a crafted HTML page. <BR></TD></TR><TR><TD CLASS="cvenobg"><B>Family</B>:</TD><TD CLASS="cvenobg">unix</TD><TD CLASS="cvenobg"><B>Class</B>:</TD><TD CLASS="cvenobg">vulnerability</TD></TR><TR><TD CLASS="cvenobg"><B>Status</B>:</TD><TD CLASS="cvenobg"></TD><TD CLASS="cvenobg"><B>Reference(s)</B>:</TD><TD CLASS="cvenobg"><A HREF="/cgi-bin/skdb.pl/cvename/CVE-2018-17472.html">CVE-2018-17472</A><BR></TD></TR><TR><TD CLASS="cvenobg"><B>Platform(s)</B>:</TD><TD CLASS="cvenobg">Ubuntu 18.04 LTS<BR></TD><TD CLASS="cvenobg"><B>Product(s)</B>:</TD><TD CLASS="cvenobg"></TD></TR><TR><TD CLASS="cvebg" COLSPAN="4"><B>Definition Synopsis</B></TD></TR><TR><TD CLASS="cvenobg" COLSPAN="4"><LI CLASS="leaf1"><A HREF="/cgi-bin/skdb.pl/OVAL/oval:com.ubuntu.bionic:def:100.html">Ubuntu 18.04 LTS (bionic) is installed.</A> <LI CLASS="leaf1"><B>AND</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:com.ubuntu.bionic:tst:201817472000.html">The 'chromium-browser' package in bionic was vulnerable but has been fixed (note: '70.0.3538.67-0ubuntu0.18.04.1').</A> </TD></TR></TABLE></CENTER></TD></TR> <TR><TD COLSPAN="2" ALIGN="CENTER"><A HREF="javascript:history.go(-1)">BACK</A></TD></TR> </table></center> </body> </html>