CVE-2016-1675

HIGH · 8.8 CVSS Gepubliceerd: 06-06-2016 CWE-284

Beschrijving

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.

Vendors

Canonical Debian Opensuse Redhat Suse Google

Affected products

Ubuntu Linux Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise Chrome

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org