Lucene search

PRIOn knowledge basePRION:CVE-2016-1658

HistoryApr 18, 2016 - 10:59 a.m.

Design/Logic Flaw

2016-04-1810:59:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

JSON

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

CPENameOperatorVersion
debian_linuxeq8.0
chromele49.0.2623.112
suse_package_hub_for_suse_linux_enterpriseeq12
leapeq42.1

Name	Operator	Version
debian_linux	eq	8.0
chrome	le	49.0.2623.112
suse_package_hub_for_suse_linux_enterprise	eq	12
leap	eq	42.1

References

lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html

rhn.redhat.com/errata/RHSA-2016-0638.html

www.debian.org/security/2016/dsa-3549

codereview.chromium.org/1658913002

crbug.com/573317

googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html

security.gentoo.org/glsa/201605-02