CVE-2016-1706 The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows rem...
CriticalCVSS 9.6
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 51.0.2704.106 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2016:1865 vendor-advisory
- openSUSE-SU-2016:1868 vendor-advisory
- openSUSE-SU-2016:1869 vendor-advisory
- openSUSE-SU-2016:1918 vendor-advisory
- RHSA-2016:1485 vendor-advisory
- DSA-3637 vendor-advisory
- 1036428 vdb-entry
- USN-3041-1 vendor-advisory
- codereview.chromium.org
- crbug.com