---

CVE-2017-5107 - log back

CVE-2017-5107 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Remote
Type	+ Information disclosure
Description	+ An information leakage vulnerability has been found in the Chromium browser < 60.0.3112.78. By rendering a FeConvolveMatrix SVG filter over a target iframe and timing its execution an attacking page can extract pixel values from a cross-origin page being iframe'd. This also allows reading ones own origin for history sniffing.
References	+ https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html + https://crbug.com/686253
Notes