extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.
References
| Link | Resource |
|---|---|
| http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html | Vendor Advisory |
| https://codereview.chromium.org/1948773002 | Issue Tracking |
| https://crbug.com/608104 | Permissions Required |
| https://access.redhat.com/errata/RHSA-2016:1201 | Third Party Advisory |
| http://www.securitytracker.com/id/1036026 | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3594 | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-06-05 23:59
Updated : 2018-10-30 16:27
NVD link : CVE-2016-1700
Mitre link : CVE-2016-1700
JSON object : View
Products Affected
debian
- debian_linux
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_workstation
opensuse
- opensuse
- leap
- chrome
suse
- linux_enterprise
CWE
