cve/2017/CVE-2017-5087.md

### [CVE-2017-5087](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5087)
![](https://img.shields.io/static/v1?label=Product&message=Google%20Chrome%20prior%20to%2059.0.3071.104%20for%20Mac%2C%20Windows%20and%20Linux%2C%20and%2059.0.3071.117%20for%20Android&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Use%20after%20free&color=brighgreen)

### Description

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/allpaca/chrome-sbx-db