CVE-2016-1677 uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeUR...
MediumCVSS 6.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 50.0.2661.102 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| SUSE linux enterprise | = 12.0 | No fix listed |
| Google v8 | <= 5.1.281 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2016:1430 vendor-advisory
- openSUSE-SU-2016:1433 vendor-advisory
- openSUSE-SU-2016:1496 vendor-advisory
- DSA-3590 vendor-advisory
- 90876 vdb-entry
- 1035981 vdb-entry
- USN-2992-1 vendor-advisory
- RHSA-2016:1190 vendor-advisory
- codereview.chromium.org
- crbug.com
- GLSA-201607-07 vendor-advisory