NVD

Id
17993  
Name
CVE-2016-1643  
Description
The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98689 17993 CVE-2016-1643 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html  View
98690 17993 CVE-2016-1643 openSUSE-SU-2016:0817  View
98691 17993 CVE-2016-1643 openSUSE-SU-2016:0818  View
98692 17993 CVE-2016-1643 openSUSE-SU-2016:0828  View
98693 17993 CVE-2016-1643 DSA-3513  View
98694 17993 CVE-2016-1643 84224  View
98695 17993 CVE-2016-1643 1035259  View
98696 17993 CVE-2016-1643 USN-2920-1  View
98697 17993 CVE-2016-1643 https://code.google.com/p/chromium/issues/detail?id=589838  View
98698 17993 CVE-2016-1643 https://codereview.chromium.org/1732753004  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1016 JVNDB-2016-001789 Google Chrome で使用される Blink の WebKit/Source/core/html/forms/ImageInputType.cpp の ImageInputType::ensurePrimaryContent 関数におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Blink の WebKit/Source/core/html/forms/ImageInputType.cpp の ImageInputType::ensurePrimaryContent 関数は、user agent shadow DOM を適切に維持しないため、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1643 88149 CVE-2016-1643 17993 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001789.html 2016-03-08 2016-03-22 View