2 matches found
chromium-browser: same-origin bypass in Pepper Plugin
The PPBFlashMessageLoopImpl::InternalRun function in content/renderer/pepper/ppbflashmessageloopimpl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...
8.8CVSS7.4AI score0.01334EPSS
SaveExploits2References5
UBUNTU-CVE-2016-1631
The PPBFlashMessageLoopImpl::InternalRun function in content/renderer/pepper/ppbflashmessageloopimpl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...
8.8CVSS7.3AI score0.01334EPSS
SaveExploits2References4
20