CVE-2016-1687

Sažetak

The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.

Reference

https://codereview.chromium.org/1938123002
https://crbug.com/603748
https://codereview.chromium.org/1939833003
http://www.securityfocus.com/bid/90876
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
http://www.securitytracker.com/id/1035981
http://www.debian.org/security/2016/dsa-3590
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html
https://access.redhat.com/errata/RHSA-2016:1190
https://security.gentoo.org/glsa/201607-07
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

07-11-2023 - 02:30

Objavljeno

05-06-2016 - 23:59