CVE-2016-1677

MEDIUM · 6.5 CVSS Gepubliceerd: 06-06-2016 CWE-200

Beschrijving

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."

Vendors

Google Canonical Debian Opensuse Redhat Suse

Affected products

Chrome Ubuntu Linux Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise V8

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org