Google Chrome Denial of Service Vulnerability

2017.05.15
Risk: Low
Local: Yes
Remote: No
CVE: N/A
CWE: N/A

########################################################### # Exploit Title : Google Chrome Denial of Service Vulnerability # Exploit Author : Ashiyane Digital Security Team # Vendor Homepage: https://google.com/chrome [ Product OF Google ] # Version : 58.0.3029.83 # Test ON : Iphone7 - IOS 10.2.1 # Date : 2017 15 May # Category : Software # MY HOME : Ashiyane.org - Seravo.ir # Software Link : https://itunes.apple.com/us/app/google-chrome-the-fast-and-secure-web-browser/id535886823?mt=8 # References : https://www.youtube.com/watch?v=nMrKeyLQFos ########################################################### Researched by Ashiyane Digital Security Team Discovery Status : Published on 2017 15 May Exploitation Technique : Local Severity Level : Medium Technical Details & Description The google chrome ver[58.0.3029.83] of the ios[10.2.1] has a vulnerability inside of the History management . interact with search History through and writing word in the same time interval , the Software crashs. The video has been recorded in the vulnerability laboratory environment after the disclosure of the vulnerability . The issue leads to a permanent idevice Error message : chrome didn't shut down correctly Open GoogleChrome > Click on History > write on Search > [ Denial of Service Vulnerability ] ################################################ # Discovered By : Hassan Shakeri # Twitter : @ShakeriHassan - Fb.com/General.BlackHat - Me@Seravo.ir ###########################################################

References:

https://www.youtube.com/watch?v=nMrKeyLQFos
https://itunes.apple.com/us/app/google-chrome-the-fast-and-secure-web-browser/id535886823?mt=8


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top