Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1670

Опубликовано: 14 мая 2016
Источник: nvd
CVSS3: 5.3
CVSS2: 2.6
EPSS Низкий

Описание

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 50.0.2661.87 (включая)
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00682
Низкий

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 9 лет назад

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.

redhat
больше 9 лет назад

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.

CVSS3: 5.3
debian
больше 9 лет назад

Race condition in the ResourceDispatcherHostImpl::BeginRequest functio ...

CVSS3: 5.3
github
больше 3 лет назад

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.

suse-cvrf
больше 9 лет назад

Security update for Chromium

EPSS

Процентиль: 71%
0.00682
Низкий

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-362