Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1676

Опубликовано: 25 мая 2016
Источник: redhat
CVSS2: 6.8

Описание

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1340009chromium-browser: cross-origin bypass in extension bindings

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 10 лет назад

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS3: 8.8
nvd
около 10 лет назад

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS3: 8.8
debian
около 10 лет назад

extensions/renderer/resources/binding.js in the extension bindings in ...

CVSS3: 8.8
github
больше 4 лет назад

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

fstec
около 10 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю обойти существующую политику ограничения доступа

6.8 Medium

CVSS2