Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-5196

Опубликовано: 19 янв. 2017
Источник: debian

Описание

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromium-browsernot-affectedpackage

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

CVSS3: 8.8
nvd
около 9 лет назад

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

CVSS3: 8.8
github
больше 3 лет назад

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

fstec
около 9 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации