CVE

Id
94369  
CVE No.
CVE-2016-7549  
Status
Candidate  
Description
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
796308 94369 CVE-2016-7549 CONFIRM:https://codereview.chromium.org/1534933002  View
796309 94369 CVE-2016-7549 CONFIRM:https://crbug.com/556351  View
796310 94369 CVE-2016-7549 CONFIRM:https://crbug.com/646394  View
796311 94369 CVE-2016-7549 CONFIRM:https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html  View
796312 94369 CVE-2016-7549 BID:93160  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4991 JVNDB-2016-005764 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-7862 94369 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005764.html  View