CVE

Id
91969  
CVE No.
CVE-2016-5150  
Status
Candidate  
Description
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.  
Phase
Assigned (20160531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
788335 91969 CVE-2016-5150 CONFIRM:https://codereview.chromium.org/2255413004/  View
788336 91969 CVE-2016-5150 CONFIRM:https://crbug.com/637963  View
788337 91969 CVE-2016-5150 CONFIRM:https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html  View
788338 91969 CVE-2016-5150 DEBIAN:DSA-3660  View
788339 91969 CVE-2016-5150 URL:http://www.debian.org/security/2016/dsa-3660  View
788340 91969 CVE-2016-5150 REDHAT:RHSA-2016:1854  View
788341 91969 CVE-2016-5150 URL:http://rhn.redhat.com/errata/RHSA-2016-1854.html  View
788342 91969 CVE-2016-5150 SUSE:openSUSE-SU-2016:2349  View
788343 91969 CVE-2016-5150 URL:http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html  View
788344 91969 CVE-2016-5150 SUSE:SUSE-SU-2016:2251  View
788345 91969 CVE-2016-5150 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html  View
788346 91969 CVE-2016-5150 SUSE:openSUSE-SU-2016:2250  View
788347 91969 CVE-2016-5150 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html  View
788348 91969 CVE-2016-5150 SUSE:openSUSE-SU-2016:2296  View
788349 91969 CVE-2016-5150 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html  View
788350 91969 CVE-2016-5150 BID:92717  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3149 JVNDB-2016-003922 Oracle Siebel CRM の Siebel UI Framework における SWSE Server に関する脆弱性 Oracle Siebel CRM の Siebel UI Framework には、SWSE Server に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2016-5463 91969 3.5 4.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003922.html  View