NVD

Id
17988  
Name
CVE-2016-1638  
Description
extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-05  
Modified Date
2016-12-02  
Seq
2016-1638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98624 17988 CVE-2016-1638 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html  View
98625 17988 CVE-2016-1638 openSUSE-SU-2016:0664  View
98626 17988 CVE-2016-1638 SUSE-SU-2016:0665  View
98627 17988 CVE-2016-1638 openSUSE-SU-2016:0684  View
98628 17988 CVE-2016-1638 openSUSE-SU-2016:0729  View
98629 17988 CVE-2016-1638 DSA-3507  View
98630 17988 CVE-2016-1638 84008  View
98631 17988 CVE-2016-1638 1035185  View
98632 17988 CVE-2016-1638 https://code.google.com/p/chromium/issues/detail?id=585282  View
98633 17988 CVE-2016-1638 https://codereview.chromium.org/1744623002  View
98634 17988 CVE-2016-1638 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
853 JVNDB-2016-001626 Google Chrome の拡張サブシステムの extensions/renderer/resources/platform_app.js におけるアクセス制限を回避される脆弱性 Google Chrome の拡張サブシステムの extensions/renderer/resources/platform_app.js は、Web API の使用を適切に制限しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2016-1638 88144 CVE-2016-1638 17988 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001626.html 2016-03-02 2016-03-08 View