NVD

Id
21882  
Name
CVE-2016-7549  
Description
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-25  
Modified Date
2016-10-04  
Seq
2016-7549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117278 21882 CVE-2016-7549 93160  View
117279 21882 CVE-2016-7549 https://codereview.chromium.org/1534933002  View
117280 21882 CVE-2016-7549 https://crbug.com/556351  View
117281 21882 CVE-2016-7549 https://crbug.com/646394  View
117282 21882 CVE-2016-7549 https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4145 JVNDB-2016-004918 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome は、特定の IPC メッセージの受信先が有効な RenderFrame、または RenderWidget であることを確認しないため、サービス運用妨害 (不正なポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-7549 94056 CVE-2016-7549 21882 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004918.html 2016-09-13 2016-09-28 View