Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1638

Опубликовано: 02 мар. 2016
Источник: redhat
CVSS2: 4.3

Описание

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

Ссылки на источники

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1314222chromium-browser: WebAPI Bypass

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2016-1638

CVSS3: 6.3
ubuntu
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

nvd логотип

CVE-2016-1638

CVSS3: 6.3
nvd
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

debian логотип

CVE-2016-1638

CVSS3: 6.3
debian
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsys ...

github логотип

GHSA-4pq7-5p7q-5pv5

CVSS3: 6.3
github
больше 3 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

fstec логотип

BDU:2016-00649

fstec
почти 10 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа

4.3 Medium

CVSS2