NVD

Id
17984  
Name
CVE-2016-1634  
Description
Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-05  
Modified Date
2016-12-02  
Seq
2016-1634  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98577 17984 CVE-2016-1634 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html  View
98578 17984 CVE-2016-1634 openSUSE-SU-2016:0664  View
98579 17984 CVE-2016-1634 SUSE-SU-2016:0665  View
98580 17984 CVE-2016-1634 openSUSE-SU-2016:0684  View
98581 17984 CVE-2016-1634 openSUSE-SU-2016:0729  View
98582 17984 CVE-2016-1634 DSA-3507  View
98583 17984 CVE-2016-1634 84008  View
98584 17984 CVE-2016-1634 1035185  View
98585 17984 CVE-2016-1634 USN-2920-1  View
98586 17984 CVE-2016-1634 https://code.google.com/p/chromium/issues/detail?id=559292  View
98587 17984 CVE-2016-1634 https://codereview.chromium.org/1556963002  View
98588 17984 CVE-2016-1634 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
849 JVNDB-2016-001622 Google Chrome で使用される Blink の WebKit/Source/core/css/resolver/StyleResolver.cpp におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Blink の WebKit/Source/core/css/resolver/StyleResolver.cpp の StyleResolver::appendCSSStyleSheet 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1634 88140 CVE-2016-1634 17984 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001622.html 2016-03-02 2016-03-08 View