CVE

Id
88460  
CVE No.
CVE-2016-1641  
Status
Candidate  
Description
Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.  
Phase
Assigned (20160112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
767903 88460 CVE-2016-1641 CONFIRM:http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html  View
767904 88460 CVE-2016-1641 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=583718  View
767905 88460 CVE-2016-1641 CONFIRM:https://codereview.chromium.org/1730363003  View
767906 88460 CVE-2016-1641 DEBIAN:DSA-3507  View
767907 88460 CVE-2016-1641 URL:http://www.debian.org/security/2016/dsa-3507  View
767908 88460 CVE-2016-1641 GENTOO:GLSA-201603-09  View
767909 88460 CVE-2016-1641 URL:https://security.gentoo.org/glsa/201603-09  View
767910 88460 CVE-2016-1641 SUSE:SUSE-SU-2016:0665  View
767911 88460 CVE-2016-1641 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html  View
767912 88460 CVE-2016-1641 SUSE:openSUSE-SU-2016:0664  View
767913 88460 CVE-2016-1641 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html  View
767914 88460 CVE-2016-1641 SUSE:openSUSE-SU-2016:0684  View
767915 88460 CVE-2016-1641 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html  View
767916 88460 CVE-2016-1641 SUSE:openSUSE-SU-2016:0729  View
767917 88460 CVE-2016-1641 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html  View
767918 88460 CVE-2016-1641 UBUNTU:USN-2920-1  View
767919 88460 CVE-2016-1641 URL:http://www.ubuntu.com/usn/USN-2920-1  View
767920 88460 CVE-2016-1641 BID:84008  View
767921 88460 CVE-2016-1641 URL:http://www.securityfocus.com/bid/84008  View
767922 88460 CVE-2016-1641 SECTRACK:1035185  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
975 JVNDB-2016-001748 Mozilla Firefox の dom/security/nsCSPContext.cpp におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox の dom/security/nsCSPContext.cpp の nsCSPContext::SendReports 関数は、Content Security Policy (CSP) 違反レポートに対する非 HTTP のレポート URI の使用を適切に制限しないため、サービス運用妨害 (データの上書き) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2016-1954 88460 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001748.html  View