NVD

Id
17985  
Name
CVE-2016-1635  
Description
extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-05  
Modified Date
2016-12-02  
Seq
2016-1635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98589 17985 CVE-2016-1635 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html  View
98590 17985 CVE-2016-1635 openSUSE-SU-2016:0664  View
98591 17985 CVE-2016-1635 SUSE-SU-2016:0665  View
98592 17985 CVE-2016-1635 openSUSE-SU-2016:0684  View
98593 17985 CVE-2016-1635 openSUSE-SU-2016:0729  View
98594 17985 CVE-2016-1635 DSA-3507  View
98595 17985 CVE-2016-1635 84008  View
98596 17985 CVE-2016-1635 1035185  View
98597 17985 CVE-2016-1635 https://code.google.com/p/chromium/issues/detail?id=585268  View
98598 17985 CVE-2016-1635 https://codereview.chromium.org/1684953002  View
98599 17985 CVE-2016-1635 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
850 JVNDB-2016-001623 Google Chrome の extensions/renderer/render_frame_observer_natives.cc におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の extensions/renderer/render_frame_observer_natives.cc は、OnDocumentElementCreated の処理中に、オブジェクトライフタイムおよび再入力の問題を適切に考慮しないため、サービス運用妨害 (解放済みメモリの使用 (use-after-free)) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1635 88141 CVE-2016-1635 17985 10 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001623.html 2016-03-02 2016-03-08 View