NVD

Id
18043  
Name
CVE-2016-1693  
Description
browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-06-05  
Modified Date
2016-11-28  
Seq
2016-1693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
99239 18043 CVE-2016-1693 http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html  View
99240 18043 CVE-2016-1693 openSUSE-SU-2016:1430  View
99241 18043 CVE-2016-1693 openSUSE-SU-2016:1433  View
99242 18043 CVE-2016-1693 openSUSE-SU-2016:1496  View
99243 18043 CVE-2016-1693 DSA-3590  View
99244 18043 CVE-2016-1693 90876  View
99245 18043 CVE-2016-1693 1035981  View
99246 18043 CVE-2016-1693 RHSA-2016:1190  View
99247 18043 CVE-2016-1693 https://codereview.chromium.org/1919043002  View
99248 18043 CVE-2016-1693 https://crbug.com/598752  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2238 JVNDB-2016-003011 Google Chrome の browser/safe_browsing/srt_field_trial_win.cc における chrome_cleanup_tool.exe ファイルを偽造される脆弱性 Google Chrome の browser/safe_browsing/srt_field_trial_win.cc は、Software Removal Tool の取得に dl.google.com の HTTPS サービスを使用しないため、chrome_cleanup_tool.exe (別名 CCT) ファイルを偽造される脆弱性が存在します。 CVE-2016-1693 88199 CVE-2016-1693 18043 2.6 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003011.html 2016-05-25 2016-08-31 View