Remote Yes

Type Arbitrary command execution

Description

A possible command injection flaw has been found in the mailto handling component of the Chromium browser.

AVG-339 qt5-webengine 5.9.0-2 5.9.1-1 Critical Fixed

AVG-289 chromium 58.0.3029.110-1 59.0.3071.86-1 Critical Fixed

04 Jul 2017 ASA-201707-4 AVG-339 qt5-webengine Critical multiple issues

07 Jun 2017 ASA-201706-8 AVG-289 chromium Critical multiple issues

https://chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html
https://bugs.chromium.org/p/chromium/issues/detail?id=711020