NVD

Id
17977  
Name
CVE-2016-1627  
Description
The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-02-13  
Modified Date
2016-12-05  
Seq
2016-1627  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98500 17977 CVE-2016-1627 http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html  View
98501 17977 CVE-2016-1627 openSUSE-SU-2016:0491  View
98502 17977 CVE-2016-1627 openSUSE-SU-2016:0518  View
98503 17977 CVE-2016-1627 RHSA-2016:0241  View
98504 17977 CVE-2016-1627 DSA-3486  View
98505 17977 CVE-2016-1627 83125  View
98506 17977 CVE-2016-1627 1035183  View
98507 17977 CVE-2016-1627 https://code.google.com/p/chromium/issues/detail?id=571121  View
98508 17977 CVE-2016-1627 https://code.google.com/p/chromium/issues/detail?id=585517  View
98509 17977 CVE-2016-1627 https://codereview.chromium.org/1586903002  View
98510 17977 CVE-2016-1627 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
734 JVNDB-2016-001507 Google Chrome の Developer Tools サブシステムにおけるアクセス制限を回避される脆弱性 Google Chrome の Developer Tools (別名 DevTools) サブシステムは、URL スキームを検証せずに、remoteBase パラメータが chrome-devtools-frontend.appspot.com URL に関連付けられていることを確認するため、アクセス制限を回避される脆弱性が存在します。 CVE-2016-1627 88133 CVE-2016-1627 17977 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001507.html 2016-02-09 2016-11-16 View