EUVD-2016-2805

Malware in sbrugna...

Google Chrome Access Restriction Bypass

The vulnerability of the ChromeClientImpl::createWindow method WebKit/Source/web/ChromeClientImpl.cpp of the Blink component in Google Chrome does not prevent the creation of windows using a delayed frame. Exploiting this vulnerability could allow a malicious actor to circumvent existing access...

CVE-2016-1710

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

Design/Logic Flaw

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1710

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1710

Removed by vendor...

CVE-2016-1710: Improper Authorization

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

PT-2016-2655

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue concerns the ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink. This method does not prevent window...