NVD

Id
17994  
Name
CVE-2016-1644  
Description
WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1644  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98699 17994 CVE-2016-1644 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html  View
98700 17994 CVE-2016-1644 openSUSE-SU-2016:0817  View
98701 17994 CVE-2016-1644 openSUSE-SU-2016:0818  View
98702 17994 CVE-2016-1644 openSUSE-SU-2016:0828  View
98703 17994 CVE-2016-1644 DSA-3513  View
98704 17994 CVE-2016-1644 84224  View
98705 17994 CVE-2016-1644 1035259  View
98706 17994 CVE-2016-1644 USN-2920-1  View
98707 17994 CVE-2016-1644 https://code.google.com/p/chromium/issues/detail?id=590620  View
98708 17994 CVE-2016-1644 https://codereview.chromium.org/1755543002  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1017 JVNDB-2016-001790 Google Chrome で使用される Blink の WebKit/Source/core/layout/LayoutObject.cpp におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Blink の WebKit/Source/core/layout/LayoutObject.cpp は、再レイアウトのスケジュールを適切に制限しないため、サービス運用妨害 (解放済みメモリの使用 (use-after-free)) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1644 88150 CVE-2016-1644 17994 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001790.html 2016-03-08 2016-03-22 View