NVD

Id
17982  
Name
CVE-2016-1632  
Description
The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-05  
Modified Date
2016-12-02  
Seq
2016-1632  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98555 17982 CVE-2016-1632 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html  View
98556 17982 CVE-2016-1632 openSUSE-SU-2016:0664  View
98557 17982 CVE-2016-1632 SUSE-SU-2016:0665  View
98558 17982 CVE-2016-1632 openSUSE-SU-2016:0684  View
98559 17982 CVE-2016-1632 openSUSE-SU-2016:0729  View
98560 17982 CVE-2016-1632 DSA-3507  View
98561 17982 CVE-2016-1632 84008  View
98562 17982 CVE-2016-1632 1035185  View
98563 17982 CVE-2016-1632 https://code.google.com/p/chromium/issues/detail?id=549986  View
98564 17982 CVE-2016-1632 https://codereview.chromium.org/1433293004  View
98565 17982 CVE-2016-1632 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
847 JVNDB-2016-001620 Google Chrome の Extensions サブシステムにおけるアクセス制限を回避される脆弱性 Google Chrome の Extensions サブシステムは、自己のプロパティを適切に保持しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2016-1632 88138 CVE-2016-1632 17982 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001620.html 2016-03-02 2016-03-08 View