Vulnerability-Lookup

RHSA-2016_1080

Vulnerability from csaf_redhat - Published: 2016-05-13 07:36 - Updated: 2024-11-14 19:02

Summary

Red Hat Security Advisory: chromium-browser security update

Severity

Important

Notes

Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 50.0.2661.102. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1667, CVE-2016-1668, CVE-2016-1669, CVE-2016-1670)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2016-1667

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: 6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 12 products, the same list as for CVE-2016-1667

Threats

Impact Important

CVE-2016-1669

An integer-overflow flaw was found in V8's Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges.

5.6 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 12 products, the same list as for CVE-2016-1667

Threats

Impact Important

CVE-2016-1670

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 12 products, the same list as for CVE-2016-1667

Threats

Impact Moderate

References

25 references

URL	Category
https://access.redhat.com/errata/RHSA-2016:1080	self
https://access.redhat.com/security/updates/classi…	external
http://googlechromereleases.blogspot.com/2016/05/…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1335447	external
https://bugzilla.redhat.com/show_bug.cgi?id=1335448	external
https://bugzilla.redhat.com/show_bug.cgi?id=1335449	external
https://bugzilla.redhat.com/show_bug.cgi?id=1335450	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2016-1667	self
https://bugzilla.redhat.com/show_bug.cgi?id=1335447	external
https://www.cve.org/CVERecord?id=CVE-2016-1667	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1667	external
http://googlechromereleases.blogspot.com/2016/05/…	external
https://access.redhat.com/security/cve/CVE-2016-1668	self
https://bugzilla.redhat.com/show_bug.cgi?id=1335448	external
https://www.cve.org/CVERecord?id=CVE-2016-1668	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1668	external
https://access.redhat.com/security/cve/CVE-2016-1669	self
https://bugzilla.redhat.com/show_bug.cgi?id=1335449	external
https://www.cve.org/CVERecord?id=CVE-2016-1669	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1669	external
https://access.redhat.com/security/cve/CVE-2016-1670	self
https://bugzilla.redhat.com/show_bug.cgi?id=1335450	external
https://www.cve.org/CVERecord?id=CVE-2016-1670	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1670	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 50.0.2661.102.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1667, CVE-2016-1668, CVE-2016-1669, CVE-2016-1670)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2016:1080",
        "url": "https://access.redhat.com/errata/RHSA-2016:1080"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
        "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
      },
      {
        "category": "external",
        "summary": "1335447",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335447"
      },
      {
        "category": "external",
        "summary": "1335448",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335448"
      },
      {
        "category": "external",
        "summary": "1335449",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335449"
      },
      {
        "category": "external",
        "summary": "1335450",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335450"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1080.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2024-11-14T19:02:43+00:00",
      "generator": {
        "date": "2024-11-14T19:02:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2016:1080",
      "initial_release_date": "2016-05-13T07:36:54+00:00",
      "revision_history": [
        {
          "date": "2016-05-13T07:36:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2016-05-13T07:36:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T19:02:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.8.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-0:50.0.2661.102-1.el6.i686",
                "product": {
                  "name": "chromium-browser-0:50.0.2661.102-1.el6.i686",
                  "product_id": "chromium-browser-0:50.0.2661.102-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@50.0.2661.102-1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
                  "product_id": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@50.0.2661.102-1.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@50.0.2661.102-1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
                "product": {
                  "name": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
                  "product_id": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@50.0.2661.102-1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-1667",
      "discovery_date": "2016-05-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1335447"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: same origin bypass in dom",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-1667"
        },
        {
          "category": "external",
          "summary": "RHBZ#1335447",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335447"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-1667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1667"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        }
      ],
      "release_date": "2016-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-05-13T07:36:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:1080"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: same origin bypass in dom"
    },
    {
      "cve": "CVE-2016-1668",
      "discovery_date": "2016-05-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1335448"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: same origin bypass in blink v8 bindings",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-1668"
        },
        {
          "category": "external",
          "summary": "RHBZ#1335448",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335448"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1668",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-1668"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1668",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1668"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        }
      ],
      "release_date": "2016-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-05-13T07:36:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:1080"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: same origin bypass in blink v8 bindings"
    },
    {
      "cve": "CVE-2016-1669",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2016-05-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1335449"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer-overflow flaw was found in V8\u0027s Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "V8: integer overflow leading to buffer overflow in Zone::New",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-1669"
        },
        {
          "category": "external",
          "summary": "RHBZ#1335449",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335449"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-1669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1669"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        }
      ],
      "release_date": "2016-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-05-13T07:36:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:1080"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "V8: integer overflow leading to buffer overflow in Zone::New"
    },
    {
      "cve": "CVE-2016-1670",
      "discovery_date": "2016-05-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1335450"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: race condition in loader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
          "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-1670"
        },
        {
          "category": "external",
          "summary": "RHBZ#1335450",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335450"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-1670",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-1670"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1670",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1670"
        },
        {
          "category": "external",
          "summary": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        }
      ],
      "release_date": "2016-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-05-13T07:36:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:1080"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-0:50.0.2661.102-1.el6.x86_64",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.i686",
            "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:50.0.2661.102-1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: race condition in loader"
    }
  ]
}

CVE-2016-1667 (GCVE-0-2016-1667)

Vulnerability from cvelistv5 – Published: 2016-05-14 21:00 – Updated: 2024-08-05 23:02

Summary

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

12 references

URL	Tags
http://www.securityfocus.com/bid/90584	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1035872	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-1080.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://codereview.chromium.org/1953323002/	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3590	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2960-1	vendor-advisoryx_refsource_UBUNTU
https://crbug.com/605766	x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2016/05/…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201605-02	vendor-advisoryx_refsource_GENTOO

Date Public

2016-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:02:12.510Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "90584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90584"
          },
          {
            "name": "1035872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035872"
          },
          {
            "name": "RHSA-2016:1080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
          },
          {
            "name": "openSUSE-SU-2016:1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://codereview.chromium.org/1953323002/"
          },
          {
            "name": "openSUSE-SU-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
          },
          {
            "name": "DSA-3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3590"
          },
          {
            "name": "USN-2960-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2960-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://crbug.com/605766"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
          },
          {
            "name": "openSUSE-SU-2016:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
          },
          {
            "name": "GLSA-201605-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-29T16:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "90584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90584"
        },
        {
          "name": "1035872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035872"
        },
        {
          "name": "RHSA-2016:1080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
        },
        {
          "name": "openSUSE-SU-2016:1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://codereview.chromium.org/1953323002/"
        },
        {
          "name": "openSUSE-SU-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
        },
        {
          "name": "DSA-3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3590"
        },
        {
          "name": "USN-2960-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2960-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://crbug.com/605766"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        },
        {
          "name": "openSUSE-SU-2016:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
        },
        {
          "name": "GLSA-201605-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-1667",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "90584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90584"
            },
            {
              "name": "1035872",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035872"
            },
            {
              "name": "RHSA-2016:1080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
            },
            {
              "name": "openSUSE-SU-2016:1304",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
            },
            {
              "name": "https://codereview.chromium.org/1953323002/",
              "refsource": "CONFIRM",
              "url": "https://codereview.chromium.org/1953323002/"
            },
            {
              "name": "openSUSE-SU-2016:1655",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
            },
            {
              "name": "DSA-3590",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3590"
            },
            {
              "name": "USN-2960-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2960-1"
            },
            {
              "name": "https://crbug.com/605766",
              "refsource": "CONFIRM",
              "url": "https://crbug.com/605766"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
            },
            {
              "name": "openSUSE-SU-2016:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
            },
            {
              "name": "GLSA-201605-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2016-1667",
    "datePublished": "2016-05-14T21:00:00.000Z",
    "dateReserved": "2016-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:02:12.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1668 (GCVE-0-2016-1668)

Vulnerability from cvelistv5 – Published: 2016-05-14 21:00 – Updated: 2024-08-05 23:02

Summary

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

12 references

URL	Tags
http://www.securityfocus.com/bid/90584	vdb-entryx_refsource_BID
https://codereview.chromium.org/1960013002	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035872	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-1080.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://crbug.com/605910	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3590	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2960-1	vendor-advisoryx_refsource_UBUNTU
http://googlechromereleases.blogspot.com/2016/05/…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201605-02	vendor-advisoryx_refsource_GENTOO

Date Public

2016-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:02:12.880Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "90584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90584"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://codereview.chromium.org/1960013002"
          },
          {
            "name": "1035872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035872"
          },
          {
            "name": "RHSA-2016:1080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
          },
          {
            "name": "openSUSE-SU-2016:1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://crbug.com/605910"
          },
          {
            "name": "openSUSE-SU-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
          },
          {
            "name": "DSA-3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3590"
          },
          {
            "name": "USN-2960-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2960-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
          },
          {
            "name": "openSUSE-SU-2016:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
          },
          {
            "name": "GLSA-201605-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-29T16:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "90584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90584"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://codereview.chromium.org/1960013002"
        },
        {
          "name": "1035872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035872"
        },
        {
          "name": "RHSA-2016:1080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
        },
        {
          "name": "openSUSE-SU-2016:1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://crbug.com/605910"
        },
        {
          "name": "openSUSE-SU-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
        },
        {
          "name": "DSA-3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3590"
        },
        {
          "name": "USN-2960-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2960-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        },
        {
          "name": "openSUSE-SU-2016:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
        },
        {
          "name": "GLSA-201605-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-1668",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "90584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90584"
            },
            {
              "name": "https://codereview.chromium.org/1960013002",
              "refsource": "CONFIRM",
              "url": "https://codereview.chromium.org/1960013002"
            },
            {
              "name": "1035872",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035872"
            },
            {
              "name": "RHSA-2016:1080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
            },
            {
              "name": "openSUSE-SU-2016:1304",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
            },
            {
              "name": "https://crbug.com/605910",
              "refsource": "CONFIRM",
              "url": "https://crbug.com/605910"
            },
            {
              "name": "openSUSE-SU-2016:1655",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
            },
            {
              "name": "DSA-3590",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3590"
            },
            {
              "name": "USN-2960-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2960-1"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
            },
            {
              "name": "openSUSE-SU-2016:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
            },
            {
              "name": "GLSA-201605-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2016-1668",
    "datePublished": "2016-05-14T21:00:00.000Z",
    "dateReserved": "2016-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:02:12.880Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1669 (GCVE-0-2016-1669)

Vulnerability from cvelistv5 – Published: 2016-05-14 21:00 – Updated: 2024-08-05 23:02

Summary

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

22 references

URL	Tags
http://www.securityfocus.com/bid/90584	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2017:0880	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1035872	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-1080.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2017:0881	vendor-advisoryx_refsource_REDHAT
https://codereview.chromium.org/1945313002	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0336	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:0882	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3590	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2960-1	vendor-advisoryx_refsource_UBUNTU
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://crbug.com/606115	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:0879	vendor-advisoryx_refsource_REDHAT
http://googlechromereleases.blogspot.com/2016/05/…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2017-0002.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201605-02	vendor-advisoryx_refsource_GENTOO

Date Public

2016-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:02:12.888Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "90584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90584"
          },
          {
            "name": "RHSA-2017:0880",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0880"
          },
          {
            "name": "1035872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035872"
          },
          {
            "name": "RHSA-2016:1080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
          },
          {
            "name": "openSUSE-SU-2016:1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
          },
          {
            "name": "RHSA-2017:0881",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://codereview.chromium.org/1945313002"
          },
          {
            "name": "RHSA-2018:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0336"
          },
          {
            "name": "RHSA-2017:0882",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0882"
          },
          {
            "name": "openSUSE-SU-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
          },
          {
            "name": "DSA-3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3590"
          },
          {
            "name": "USN-2960-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2960-1"
          },
          {
            "name": "FEDORA-2016-6fd3131c03",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/"
          },
          {
            "name": "FEDORA-2016-e720bc8451",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://crbug.com/606115"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541"
          },
          {
            "name": "RHSA-2017:0879",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0879"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
          },
          {
            "name": "openSUSE-SU-2016:1834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html"
          },
          {
            "name": "RHSA-2017:0002",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0002.html"
          },
          {
            "name": "openSUSE-SU-2016:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
          },
          {
            "name": "GLSA-201605-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-22T10:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "90584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90584"
        },
        {
          "name": "RHSA-2017:0880",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0880"
        },
        {
          "name": "1035872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035872"
        },
        {
          "name": "RHSA-2016:1080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
        },
        {
          "name": "openSUSE-SU-2016:1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
        },
        {
          "name": "RHSA-2017:0881",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://codereview.chromium.org/1945313002"
        },
        {
          "name": "RHSA-2018:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0336"
        },
        {
          "name": "RHSA-2017:0882",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0882"
        },
        {
          "name": "openSUSE-SU-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
        },
        {
          "name": "DSA-3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3590"
        },
        {
          "name": "USN-2960-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2960-1"
        },
        {
          "name": "FEDORA-2016-6fd3131c03",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/"
        },
        {
          "name": "FEDORA-2016-e720bc8451",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://crbug.com/606115"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541"
        },
        {
          "name": "RHSA-2017:0879",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0879"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        },
        {
          "name": "openSUSE-SU-2016:1834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html"
        },
        {
          "name": "RHSA-2017:0002",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0002.html"
        },
        {
          "name": "openSUSE-SU-2016:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
        },
        {
          "name": "GLSA-201605-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-1669",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "90584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90584"
            },
            {
              "name": "RHSA-2017:0880",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0880"
            },
            {
              "name": "1035872",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035872"
            },
            {
              "name": "RHSA-2016:1080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
            },
            {
              "name": "openSUSE-SU-2016:1304",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
            },
            {
              "name": "RHSA-2017:0881",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0881"
            },
            {
              "name": "https://codereview.chromium.org/1945313002",
              "refsource": "CONFIRM",
              "url": "https://codereview.chromium.org/1945313002"
            },
            {
              "name": "RHSA-2018:0336",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0336"
            },
            {
              "name": "RHSA-2017:0882",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0882"
            },
            {
              "name": "openSUSE-SU-2016:1655",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
            },
            {
              "name": "DSA-3590",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3590"
            },
            {
              "name": "USN-2960-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2960-1"
            },
            {
              "name": "FEDORA-2016-6fd3131c03",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/"
            },
            {
              "name": "FEDORA-2016-e720bc8451",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/"
            },
            {
              "name": "https://crbug.com/606115",
              "refsource": "CONFIRM",
              "url": "https://crbug.com/606115"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541"
            },
            {
              "name": "RHSA-2017:0879",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0879"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
            },
            {
              "name": "openSUSE-SU-2016:1834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html"
            },
            {
              "name": "RHSA-2017:0002",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0002.html"
            },
            {
              "name": "openSUSE-SU-2016:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
            },
            {
              "name": "GLSA-201605-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2016-1669",
    "datePublished": "2016-05-14T21:00:00.000Z",
    "dateReserved": "2016-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:02:12.888Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1670 (GCVE-0-2016-1670)

Vulnerability from cvelistv5 – Published: 2016-05-14 21:00 – Updated: 2024-08-05 23:02

Summary

Severity

No CVSS data available.

CWE

Assigner

Chrome Google root

References

12 references

URL	Tags
http://www.securityfocus.com/bid/90584	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1035872	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-1080.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3590	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2960-1	vendor-advisoryx_refsource_UBUNTU
https://crbug.com/578882	x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2016/05/…	x_refsource_CONFIRM
https://codereview.chromium.org/1608573002	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201605-02	vendor-advisoryx_refsource_GENTOO

Date Public

2016-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:02:12.981Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "90584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90584"
          },
          {
            "name": "1035872",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035872"
          },
          {
            "name": "RHSA-2016:1080",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
          },
          {
            "name": "openSUSE-SU-2016:1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
          },
          {
            "name": "openSUSE-SU-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
          },
          {
            "name": "DSA-3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3590"
          },
          {
            "name": "USN-2960-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2960-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://crbug.com/578882"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://codereview.chromium.org/1608573002"
          },
          {
            "name": "openSUSE-SU-2016:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
          },
          {
            "name": "GLSA-201605-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-29T16:57:01.000Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "90584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90584"
        },
        {
          "name": "1035872",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035872"
        },
        {
          "name": "RHSA-2016:1080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
        },
        {
          "name": "openSUSE-SU-2016:1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
        },
        {
          "name": "openSUSE-SU-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
        },
        {
          "name": "DSA-3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3590"
        },
        {
          "name": "USN-2960-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2960-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://crbug.com/578882"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://codereview.chromium.org/1608573002"
        },
        {
          "name": "openSUSE-SU-2016:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
        },
        {
          "name": "GLSA-201605-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2016-1670",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "90584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90584"
            },
            {
              "name": "1035872",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035872"
            },
            {
              "name": "RHSA-2016:1080",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1080.html"
            },
            {
              "name": "openSUSE-SU-2016:1304",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html"
            },
            {
              "name": "openSUSE-SU-2016:1655",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html"
            },
            {
              "name": "DSA-3590",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3590"
            },
            {
              "name": "USN-2960-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2960-1"
            },
            {
              "name": "https://crbug.com/578882",
              "refsource": "CONFIRM",
              "url": "https://crbug.com/578882"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html"
            },
            {
              "name": "https://codereview.chromium.org/1608573002",
              "refsource": "CONFIRM",
              "url": "https://codereview.chromium.org/1608573002"
            },
            {
              "name": "openSUSE-SU-2016:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html"
            },
            {
              "name": "GLSA-201605-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2016-1670",
    "datePublished": "2016-05-14T21:00:00.000Z",
    "dateReserved": "2016-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:02:12.981Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2016_1080

CVE-2016-1667 (GCVE-0-2016-1667)

CVE-2016-1668 (GCVE-0-2016-1668)

CVE-2016-1669 (GCVE-0-2016-1669)

CVE-2016-1670 (GCVE-0-2016-1670)

Tags

Sightings

Nomenclature

Related by attack behaviour