NVD

Id
17975  
Name
CVE-2016-1625  
Description
The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-02-13  
Modified Date
2016-12-05  
Seq
2016-1625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98479 17975 CVE-2016-1625 http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html  View
98480 17975 CVE-2016-1625 openSUSE-SU-2016:0491  View
98481 17975 CVE-2016-1625 openSUSE-SU-2016:0518  View
98482 17975 CVE-2016-1625 RHSA-2016:0241  View
98483 17975 CVE-2016-1625 DSA-3486  View
98484 17975 CVE-2016-1625 83125  View
98485 17975 CVE-2016-1625 1035183  View
98486 17975 CVE-2016-1625 https://code.google.com/p/chromium/issues/detail?id=509313  View
98487 17975 CVE-2016-1625 https://codereview.chromium.org/1669723002  View
98488 17975 CVE-2016-1625 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
733 JVNDB-2016-001506 Google Chrome の Chrome Instant 機能における制限を回避される脆弱性 Google Chrome の Chrome Instant 機能は、New Tab Page (NTP) ナビゲーションターゲットが、最もアクセス数が多いリスト、または推奨リスト上にあることを確認しないため、制限を回避される脆弱性が存在します。 CVE-2016-1625 88131 CVE-2016-1625 17975 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001506.html 2016-02-09 2016-02-26 View