CVE-2016-1661 - CERT CVE
ID CVE-2016-1661
Sažetak Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.
Reference
CVSS
Base: 8.3
Impact: 8.5
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL COMPLETE
CVSS vektor AV:N/AC:M/Au:N/C:P/I:P/A:C
Zadnje važnije ažuriranje 07-11-2023 - 02:30
Objavljeno 14-05-2016 - 21:59