Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1618 State: PUBLISHED Published: 2016-01-25T11:00:00 Last Updated: 2024-08-05T23:02:12.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81430 - http://rhn.redhat.com/errata/RHSA-2016-0072.html - https://code.google.com/p/chromium/issues/detail?id=552749 - http://www.ubuntu.com/usn/USN-2877-1 - http://googlech
ml - https://code.google.com/p/chromium/issues/detail?id=552749 - http://www.ubuntu.com/usn/USN-2877-1 - http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html - http://www.securitytracker.com/id/1034801 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html - https://codereview.chromium.org/1419293005 - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html - http://www.debian.org/security/2016/dsa-3456 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html
CVE ID: CVE-2016-1619 State: PUBLISHED Published: 2016-01-25T11:00:00 Last Updated: 2024-08-05T23:02:12.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81430 - http://rhn.redhat.com/errata/RHSA-2016-0072.html - http://googlechromereleases.blogspot.com/2016/01/st
s.com/bid/81430 - http://rhn.redhat.com/errata/RHSA-2016-0072.html - http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html - http://www.securitytracker.com/id/1034801 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html - https://codereview.chromium.org/1521473003 - https://code.google.com/p/chromium/issues/detail?id=557223 - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html - http://www.debian.org/security/2016/dsa-3456 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html
CVE ID: CVE-2016-1620 State: PUBLISHED Published: 2016-01-25T11:00:00 Last Updated: 2024-08-05T23:02:12.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=579625 - https://code.google.com/p/chromium/issues/detail?id=554129 - http://www.securityfocus.com/bid/81430 - https://code.google.com/p/chromium/issues/detail?id=549155 - https://code.google.com/p/chromium/issues/detail?id=539563 - http://rhn.r
oogle.com/p/chromium/issues/detail?id=549155 - https://code.google.com/p/chromium/issues/detail?id=539563 - http://rhn.redhat.com/errata/RHSA-2016-0072.html - https://code.google.com/p/chromium/issues/detail?id=570427 - https://code.google.com/p/chromium/issues/detail?id=561497 - http://www.ubuntu.com/usn/USN-2877-1 - https://code.google.com/p/chromium/issues/detail?id=562984 - http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html - https://code.google.com/p/chromium/issues/detail?id=472618 - https://code.google.com/p/chromium/issues/detail?id=545520 - https://code.google.com/p/chromium/issues/detail?id=546814 - https://code.google.com/p/chromium/issues/detail?id=537
0 - https://code.google.com/p/chromium/issues/detail?id=546814 - https://code.google.com/p/chromium/issues/detail?id=537656 - https://code.google.com/p/chromium/issues/detail?id=576383 - http://www.securitytracker.com/id/1034801 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html - https://code.google.com/p/chromium/issues/detail?id=565967 - https://code.google.com/p/chromium/issues/detail?id=531259 - https://code.google.com/p/chromium/issues/detail?id=514080 - https://code.google.com/p/chromium/issues/detail?id=569170 - https://code.google.com/p/chromium/issues/detail?id=561478 - https://code.google.com/p/chromium/issues/detail?id=572406 - https://code.google.com/p/
romium/issues/detail?id=561478 - https://code.google.com/p/chromium/issues/detail?id=572406 - https://code.google.com/p/chromium/issues/detail?id=566231 - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html - https://code.google.com/p/chromium/issues/detail?id=551143 - http://www.debian.org/security/2016/dsa-3456 - https://code.google.com/p/chromium/issues/detail?id=562986 - https://code.google.com/p/chromium/issues/detail?id=551028 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html - https://code.google.com/p/chromium/issues/detail?id=554172 - https://code.google.com/p/chromium/issues/detail?id=553
l - https://code.google.com/p/chromium/issues/detail?id=554172 - https://code.google.com/p/chromium/issues/detail?id=553595 - https://code.google.com/p/chromium/issues/detail?id=565049 - https://code.google.com/p/chromium/issues/detail?id=561488 - https://code.google.com/p/chromium/issues/detail?id=552681
CVE ID: CVE-2016-1621 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T23:02:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libvpx/+/04839626ed859623901ebd3a5fd483982186b59d - http://source.android.com/security/bulletin/2016-03-01.html
xternal/libvpx/+/04839626ed859623901ebd3a5fd483982186b59d - http://source.android.com/security/bulletin/2016-03-01.html - https://android.googlesource.com/platform/external/libvpx/+/5a9753fca56f0eeb9f61e342b2fccffc364f9426 - https://security.gentoo.org/glsa/201603-09 - https://android.googlesource.com/platform/frameworks/av/+/5a6788730acfc6fd8f4a6ef89d2c376572a26b55 - http://www.securityfocus.com/bid/84239 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179128.html
CVE ID: CVE-2016-1622 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83125 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p/chromium/issues/detail?id=546677 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-upda
ode.google.com/p/chromium/issues/detail?id=546677 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html - https://codereview.chromium.org/1417513003
CVE ID: CVE-2016-1623 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83125 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p/chrom
: - http://www.securityfocus.com/bid/83125 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p/chromium/issues/detail?id=577105 - https://codereview.chromium.org/1659013003 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - http://www.ubuntu.com/usn/USN-2895-1 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1624 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83125 - https://codereview.chromium.org/1662313002 - http://www.securitytracker.com/id/1035183 - http://googlechromereleases.blogspot.com/2016/02/s
chromium.org/1662313002 - http://www.securitytracker.com/id/1035183 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - https://code.google.com/p/chromium/issues/detail?id=583607 - http://www.ubuntu.com/usn/USN-2895-1 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1625 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83125 - http://www.securitytracker.com/id/1035183 - https://codereview.chromium.org/1669723002 - http://googlechromereleas
125 - http://www.securitytracker.com/id/1035183 - https://codereview.chromium.org/1669723002 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - https://code.google.com/p/chromium/issues/detail?id=509313 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1626 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83125 - https://codereview.chromium.org/1583233008 - https://security.gentoo.org/glsa/201710-26 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p
008 - https://security.gentoo.org/glsa/201710-26 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p/chromium/issues/detail?id=571480 - http://www.zerodayinitiative.com/advisories/ZDI-16-171 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1627 State: PUBLISHED Published: 2016-02-14T02:00:00 Last Updated: 2024-08-05T23:02:12.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1586903002 - http://www.secur
onal Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1586903002 - http://www.securityfocus.com/bid/83125 - http://www.securitytracker.com/id/1035183 - https://code.google.com/p/chromium/issues/detail?id=585517 - https://code.google.com/p/chromium/issues/detail?id=571121 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html - http://www.debian.org/security/2016/dsa-3486 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1628 State: PUBLISHED Published: 2016-02-21T02:00:00 Last Updated: 2024-08-05T23:02:12.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=571479 - http://www.securityfocus.com/bid/83125 - https:/
erences: - https://code.google.com/p/chromium/issues/detail?id=571479 - http://www.securityfocus.com/bid/83125 - https://security.gentoo.org/glsa/201710-26 - http://www.securitytracker.com/id/1035183 - http://www.debian.org/security/2017/dsa-4013 - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html - https://security.gentoo.org/glsa/201603-09 - http://www.zerodayinitiative.com/advisories/ZDI-16-172/ - http://www.debian.org/security/2016/dsa-3486 - https://codereview.chromium.org/1590593002 - http://rhn.redhat.com/errata/RHSA-2016-0241.html
CVE ID: CVE-2016-1629 State: PUBLISHED Published: 2016-02-21T18:00:00 Last Updated: 2024-08-05T23:02:12.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_18.html - http://www.ubuntu.com/usn/USN-2905-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00048.html - http://www.securitytracker.com/id/1035184 - http://rhn.redhat.com/errata/RHSA-2016-0286.html - https://security.
.html - http://www.securitytracker.com/id/1035184 - http://rhn.redhat.com/errata/RHSA-2016-0286.html - https://security.gentoo.org/glsa/201603-09 - http://www.debian.org/security/2016/dsa-3486 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00045.html - http://www.securityfocus.com/bid/83302 - https://code.google.com/p/chromium/issues/detail?id=583431
CVE ID: CVE-2016-1630 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 -
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1464223002 - https://code.google.com/p/chromium/issues/detail?id=560011 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1631 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus
03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - https://codereview.chromium.org/1559113002/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://code.google.com/p/chromium/issues/detail?id=569496 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1632 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.se
ounce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1433293004 - https://code.google.com/p/chromium/issues/detail?id=549986 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1633 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytrack
.html - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - http://www.ubuntu.com/usn/USN-2920-1 - https://code.google.com/p/chromium/issues/detail?id=572537 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1634 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016
ditional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html - https://code.google.com/p/chromium/issues/detail?id=559292 - http://www.securityfocus.com/bid/84008 - http://www.debian.org/security/2016/dsa-3507 - https://codereview.chromium.org/1556963002 - http://www.securitytracker.com/id/1035185 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - http://www.ubuntu.com/usn/USN-2920-1 - http://
unce/2016-03/msg00015.html - https://security.gentoo.org/glsa/201603-09 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-1635 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:02:12.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html - http://lists.opensuse.org/opensuse-security-announce