Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1671 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, related to net/base/escape.cc and net/base/filename_util.cc. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/a/chromium.org/forum/message/raw?msg=chromium-reviews/UkMGbbnTDW8/A4g-6YkfBAAJ - http://www.securityfocus.com/bid/90584 - http://www.securitytracker.com/id/1035872 - https://crbug.com/586657 - http://goog
p://www.securityfocus.com/bid/90584 - http://www.securitytracker.com/id/1035872 - https://crbug.com/586657 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html - https://codereview.chromium.org/1704163003/ - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1672 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - https://crbug.com/590118 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytr
://crbug.com/590118 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1748943002/ - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1673 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - htt
p://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://crbug.com/597532 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1674 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensus
590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - https://crbug.com/598165 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1675 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1858833003 - http://www.securityfocus.com/bid/90876 - https://crbug.com/600182 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - h
tp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1676 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - https://codereview.chromium.org/
p://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - https://codereview.chromium.org/1903273003 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://crbug.com/604901 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1677 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion." Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/602970 - http://www.securityfocus.com/bid/90876 - https://codereview.chromium.org/1936083002 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id
6083002 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1678 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - https://crbug.com/595259 - https://codereview.chromium.org/1875053002 - http://lists.opensuse.org/opensuse-security-announce/2016-0
ug.com/595259 - https://codereview.chromium.org/1875053002 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1679 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytrack
us.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1930953002 - https://crbug.com/606390 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1680 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 -
unce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://crbug.com/589848 - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1751883004 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1681 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/
curity-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://codereview.chromium.org/2001663002 - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html - https://crbug.com/613160
CVE ID: CVE-2016-1682 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/579801 - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.se
securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1861253004 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1683 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3605 - https://bugzilla.redhat.com/show_bug.cgi?id=1340016 - https://git.gnome.org/browse/libxslt/commit/?id=d182d8f6ba3071503d96ce17395c9d55871f0242 - http:
ow_bug.cgi?id=1340016 - https://git.gnome.org/browse/libxslt/commit/?id=d182d8f6ba3071503d96ce17395c9d55871f0242 - http://www.securityfocus.com/bid/90876 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - https://support.apple.com/HT206901 - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-299
590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://www.securityfocus.com/bid/91826 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://crbug.com/583156 - https://support.apple.com/HT206905 - https://support.apple.com/HT206903 - https://support.apple.com/HT206902 - https://support.apple.com/HT206904 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-s
- https://support.apple.com/HT206904 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html - https://support.apple.com/HT206899 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/
CVE ID: CVE-2016-1684 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/583171 - https://git.gnome.org/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d - http://www.debian.org/security/2016/dsa-3605 - h
rg/browse/libxslt/commit/?id=91d0540ac9beaa86719a05b749219a69baa0dd8d - http://www.debian.org/security/2016/dsa-3605 - http://www.securityfocus.com/bid/90876 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - https://support.apple.com/HT206901 - http://www.securitytracker.com/id/1035981 - https://bugzilla.redhat.com/show_bug.cgi?id=1340017 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-
cgi?id=1340017 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://support.apple.com/HT206905 - https://support.apple.com/HT206903 - https://support.apple.com/HT206902 - https://support.apple.com/HT206904 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-an
support.apple.com/HT206904 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html - https://support.apple.com/HT206899 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/
CVE ID: CVE-2016-1685 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.b
http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - https://crbug.com/601362 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1875673004 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1686 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:13.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 -
ttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://crbug.com/603518 - https://codereview.chromium.org/1892143003 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1687 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1938123002 - https://crbug.com/603748 - https://codereview.chromium.org/1939833003 - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.secu
curityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html
CVE ID: CVE-2016-1688 State: PUBLISHED Published: 2016-06-05T23:00:00 Last Updated: 2024-08-05T23:02:12.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90876 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/201
security-announce/2016-06/msg00005.html - http://www.securitytracker.com/id/1035981 - http://www.debian.org/security/2016/dsa-3590 - https://crbug.com/604897 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html - http://www.ubuntu.com/usn/USN-2992-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html - https://access.redhat.com/errata/RHSA-2016:1190 - https://codereview.chromium.org/1927003003 - https://security.gentoo.org/glsa/201607-07 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html