CVE

Id
88530  
CVE No.
CVE-2016-1711  
Status
Candidate  
Description
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.  
Phase
Assigned (20160112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
769170 88530 CVE-2016-1711 CONFIRM:http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html  View
769171 88530 CVE-2016-1711 CONFIRM:https://codereview.chromium.org/2079473002  View
769172 88530 CVE-2016-1711 CONFIRM:https://crbug.com/617495  View
769173 88530 CVE-2016-1711 DEBIAN:DSA-3637  View
769174 88530 CVE-2016-1711 URL:http://www.debian.org/security/2016/dsa-3637  View
769175 88530 CVE-2016-1711 REDHAT:RHSA-2016:1485  View
769176 88530 CVE-2016-1711 URL:http://rhn.redhat.com/errata/RHSA-2016-1485.html  View
769177 88530 CVE-2016-1711 SUSE:openSUSE-SU-2016:1865  View
769178 88530 CVE-2016-1711 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html  View
769179 88530 CVE-2016-1711 SUSE:openSUSE-SU-2016:1868  View
769180 88530 CVE-2016-1711 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html  View
769181 88530 CVE-2016-1711 SUSE:openSUSE-SU-2016:1869  View
769182 88530 CVE-2016-1711 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html  View
769183 88530 CVE-2016-1711 SUSE:openSUSE-SU-2016:1918  View
769184 88530 CVE-2016-1711 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html  View
769185 88530 CVE-2016-1711 UBUNTU:USN-3041-1  View
769186 88530 CVE-2016-1711 URL:http://www.ubuntu.com/usn/USN-3041-1  View
769187 88530 CVE-2016-1711 BID:92053  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2306 JVNDB-2016-003079 HPE Insight Control における重要な情報を取得される脆弱性 HPE Insight Control には、重要な情報を取得される、データを変更される、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-2024 88530 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003079.html  View