CVE-2016-1632

EUVD-2016-2727
The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 48.0.2564.116
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
precise
ignored
trusty
Fixed 49.0.2623.87-0ubuntu0.14.04.1.1112
released
wily
Fixed 49.0.2623.87-0ubuntu0.15.10.1.1222
released
oxide-qt
precise
dne
trusty
dne
wily
not-affected
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html
http://www.debian.org/security/2016/dsa-3507
http://www.securityfocus.com/bid/84008
http://www.securitytracker.com/id/1035185
https://code.google.com/p/chromium/issues/detail?id=549986
https://codereview.chromium.org/1433293004
https://security.gentoo.org/glsa/201603-09
http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html
http://www.debian.org/security/2016/dsa-3507
http://www.securityfocus.com/bid/84008
http://www.securitytracker.com/id/1035185
https://code.google.com/p/chromium/issues/detail?id=549986
https://codereview.chromium.org/1433293004
https://security.gentoo.org/glsa/201603-09