CVE-2016-1676

HIGH · 8.8 CVSS Gepubliceerd: 06-06-2016 CWE-284

Beschrijving

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendors

Debian Opensuse Redhat Suse Google

Affected products

Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise Chrome

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org