Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rbug.com/628304 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://codereview.chromium.org/2218783002/
CVE ID: CVE-2016-5160 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162. Additional Analyst Notes: - CVE Program C
ettings, via a crafted web site, a different vulnerability than CVE-2016-5162. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://crbug.com/576867 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://codereview.chromium.org/2007133004 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/2016
odereview.chromium.org/2007133004 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5161 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages "type confusion" in the StylePropertySerializer class. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-annou
lass. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://codereview.chromium.org/2103043004 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://zerodayinitiative.com/advisories/ZDI-16-501/ - https://crbug.com/622420 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://list
/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5162 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160. Additional Analyst Notes: - CVE Program C
ettings, via a crafted web site, a different vulnerability than CVE-2016-5160. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/589237 - https://codereview.chromium.org/2007133004 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/2016
CVE ID: CVE-2016-5163 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechrome
ntainer: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/1988553002 - https://crbug.com/495933 - https://crbug.com/609680 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rh
urity.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5164 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromer
tainer: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://codereview.chromium.org/2253643002 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://crbug.com/637594 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-201
-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5165 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2177983004 - https://google
nsuse.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2177983004 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://crbug.com/618037 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5166 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.ht
t Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2075273002 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/616429 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.
ity.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5167 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/633585 - https://crbug.com/627355 - https://crbug.com/617648 - https://crbug.com/634394 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://crbug.com/624213 - http://www.secu
romereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://crbug.com/624213 - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://crbug.com/625575 - https://crbug.com/619379 - https://crbug.com/627418 - https://crbug.com/624214 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/642598 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - https://crbug.com/637320 - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://crbug.com/634557
CVE ID: CVE-2016-5168 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-06T00:53:48.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf - https://bugs.chromium.org/p/chromium/issues/detail?id=586820 - http://www.securityfocus.com/bid/89106 - https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
CVE ID: CVE-2016-5169 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92914 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-chrome-os_9.html - https://bugs.chromium.org/p/chromium/issues/detail?id=635879
CVE ID: CVE-2016-5170 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.
er: References: - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://security.gentoo.org/glsa/201610-09 - https://crbug.com/641101 - http://rhn.redhat.com/errata/RHSA-2016-1905.html - https://codereview.chromium.org/2332003002
CVE ID: CVE-2016-5171 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/643357 - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://googl
urity/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://codereview.chromium.org/2306023002 - https://security.gentoo.org/glsa/201610-09 - http://rhn.redhat.com/errata/RHSA-2016-1905.html
CVE ID: CVE-2016-5172 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/616386 - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html -
rityfocus.com/bid/92942 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://codereview.chromium.org/2077283004 - https://security.gentoo.org/glsa/201610-09 - http://rhn.redhat.com/errata/RHSA-2016-1905.html
CVE ID: CVE-2016-5173 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3667 - https://codereview.chromium.org/1840453002 - http://www.securitytracker.com/id/1036826 - http://www.securityf
dsa-3667 - https://codereview.chromium.org/1840453002 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://crbug.com/468931 - https://crbug.com/497507 - https://security.gentoo.org/glsa/201610-09 - http://rhn.redhat.com/errata/RHSA-2016-1905.html - https://crbug.com/471523
CVE ID: CVE-2016-5174 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://crbug.com/579934 - https://googlechromereleases.blogspo
om/id/1036826 - http://www.securityfocus.com/bid/92942 - https://crbug.com/579934 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://codereview.chromium.org/2053343003 - https://security.gentoo.org/glsa/201610-09 - http://rhn.redhat.com/errata/RHSA-2016-1905.html
CVE ID: CVE-2016-5175 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T00:53:48.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3667 - http://www.securitytracker.com/id/1036826 - http://www.securityfocus.com/bid/92942 - https://crbug.com/619217 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://security.gentoo.org/glsa/201610-09
omereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - https://security.gentoo.org/glsa/201610-09 - http://rhn.redhat.com/errata/RHSA-2016-1905.html - https://crbug.com/646394 - https://crbug.com/638166
CVE ID: CVE-2016-5176 State: PUBLISHED Published: 2016-09-29T10:00:00 Last Updated: 2024-08-06T00:53:48.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/595838 - http://www.securityfocus.com/bid/93234 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - http://rhn.redhat.com/errata/RHSA-2016-1905.html
CVE ID: CVE-2016-5177 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T00:53:48.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3683 - http://www.securityfocus.com/bid/93238 - https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-desktop_29.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html - https://bugzilla.redhat.c
pdate-for-desktop_29.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=1380631 - http://www.securitytracker.com/id/1036970 - http://rhn.redhat.com/errata/RHSA-2016-2007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNUTOWCXLWVXOTGQUS53DSRVTO3J226Z/ - http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html - https://security.gentoo.org/glsa/201610-09 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FWZVE5PX27FWPLGOPDA7ZC5MILOWN6K/
CVE ID: CVE-2016-5178 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T00:53:48.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3683 - http://www.securityfocus.com/bid/93238 - https://bugs.chromium.org/p/chromium/issues/detail?id=651092 - https://bugs.chromium.org/p/chromium/issues/detail?id=645028 - https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-des
ium.org/p/chromium/issues/detail?id=645028 - https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-desktop_29.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html - http://www.securitytracker.com/id/1036970 - https://bugzilla.redhat.com/show_bug.cgi?id=1380632 - http://rhn.redhat.com/errata/RHSA-2016-2007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNUTOWCXLWVXOTGQUS53DSRVTO3J226Z/ - http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html - https://security.gentoo.org/glsa/201610-09 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FWZVE5
lsa/201610-09 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FWZVE5PX27FWPLGOPDA7ZC5MILOWN6K/
CVE ID: CVE-2016-5179 State: PUBLISHED Published: 2018-03-06T22:00:00 Last Updated: 2024-08-06T00:53:48.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=649039 - http://www.securityfocus.com/bid/93260 - https://chromereleases.googleblog.com/2016/09/stable-channel-updates-for-chrome-os.html
CVE ID: CVE-2016-5180 State: PUBLISHED Published: 2016-10-03T15:00:00 Last Updated: 2024-08-06T00:53:48.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-01-01.html - http://www.securityfocus.com/bid/93243 - http://www.ubuntu.com/usn/USN-3143-1 - https://security.gentoo.org/glsa/201701-28 - http://www.debian.org/security/2016