CVE-2017-5029

CVE-2017-5029 is a critical integer overflow vulnerability in the libxslt library, specifically within the xsltAddTextString function, affecting Google Chrome versions prior to 57.0.2987.98 on Mac, Windows, and Linux, and 57.0.2987.108 on Android, as well as other products utilizing libxslt 1.1.29. This flaw allows a remote attacker to achieve an out-of-bounds memory write by enticing a user to visit a specially crafted HTML page. With a CVSS score of 8.8 (High), the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.