deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0980
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0981
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0980.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0982
Published: 2016-02-10
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0983, and CVE-2016-0984.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0983
Published: 2016-02-10
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0984
Published: 2016-02-10
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0985
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-1287
Published: 2016-02-11
Description: Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike; http://www.securitytracker.com/id/1034997
CVE: CVE-2016-0881
Published: 2016-02-12
Description: EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: http://seclists.org/bugtraq/2016/Feb/66; http://www.securitytracker.com/id/1034993; http://seclists.org/bugtraq/2016/Feb/66
CVE: CVE-2016-0882
Published: 2016-02-12
Description: EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.4 (MEDIUM)
References: http://seclists.org/bugtraq/2016/Feb/66; http://www.securitytracker.com/id/1034993; http://seclists.org/bugtraq/2016/Feb/66
CVE: CVE-2016-1315
Published: 2016-02-12
Description: The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160211-esaamp; http://www.securitytracker.com/id/1035008; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160211-esaamp
CVE: CVE-2016-1320
Published: 2016-02-12
Description: The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78, CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp; https://www.tenable.com/security/research/tra-2016-38; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160209-pcp
CVE: CVE-2016-1322
Published: 2016-02-12
Description: The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp1; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp1
CVE: CVE-2016-1323
Published: 2016-02-12
Description: The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp2; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp2
CVE: CVE-2016-1324
Published: 2016-02-12
Description: The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service (resource outage) by accessing an administrative page, aka Bug ID CSCuv84125.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp3; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-sp3
CVE: CVE-2016-1986
Published: 2016-02-12
Description: HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04958567; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04958567
CVE: CVE-2016-2326
Published: 2016-02-12
Description: Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS (aka presentation timestamp) value in a .mov file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7c0b84d89911b2035161f5ef51aafbfcc84aa9e2; http://www.debian.org/security/2016/dsa-3506; http://www.securityfocus.com/bid/84165
CVE: CVE-2016-2327
Published: 2016-02-12
Description: libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .avi file, related to the apng_encode_frame and encode_apng functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ec9c5ce8a753175244da971fed9f1e25aef7971; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8f4c3e4b92212d98f5b9ca2dee13e076effe9589; http://www.securitytracker.com/id/1035010
CVE: CVE-2016-2328
Published: 2016-02-12
Description: libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and bayer_to_yv12_wrapper functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=757248ea3cd917a7755cb15f817a9b1f15578718; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ad3b6fa7d83db7de951ed891649af93a47e74be5; http://www.securitytracker.com/id/1035010
CVE: CVE-2016-2329
Published: 2016-02-12
Description: libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f464e9c229006e16f6bb5403c5529fdd0a9edd; http://lists.opensuse.org/opensuse-updates/2016-02/msg00129.html; http://www.securityfocus.com/bid/84212
CVE: CVE-2016-2330
Published: 2016-02-12
Description: libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and gif_encode_close functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=03d83ba34b[PII_REDACTED]eae18dfac0f519503777; http://www.securityfocus.com/bid/84217; http://www.securitytracker.com/id/1035010
CVE: CVE-2016-2073
Published: 2016-02-12
Description: The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/01/25/6; http://www.openwall.com/lists/oss-security/2016/01/26/7; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html
CVE: CVE-2015-8629
Published: 2016-02-13
Description: The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8341; http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html
CVE: CVE-2015-8630
Published: 2016-02-13
Description: The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
CVSS Score: 7.5 (HIGH)
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8342; http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html
CVE: CVE-2015-8631
Published: 2016-02-13
Description: Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8343; http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html
CVE: CVE-2016-0863
Published: 2016-02-13
Description: Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE: CVE-2016-0864
Published: 2016-02-13
Description: Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE: CVE-2016-0865
Published: 2016-02-13
Description: Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE: CVE-2016-0866
Published: 2016-02-13
Description: Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE: CVE-2016-1521
Published: 2016-02-13
Description: The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
CVE: CVE-2016-1522
Published: 2016-02-13
Description: Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
CVE: CVE-2016-1523
Published: 2016-02-13
Description: The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
CVSS Score: 6.5 (MEDIUM)
References: http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
CVE: CVE-2016-1524
Published: 2016-02-13
Description: Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.
CVSS Score: 9.6 (CRITICAL)
References: http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html; http://seclists.org/fulldisclosure/2016/Feb/30; http://www.kb.cert.org/vuls/id/777024
CVE: CVE-2016-1525
Published: 2016-02-13
Description: Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html; http://packetstormsecurity.com/files/135999/NETGEAR-ProSafe-Network-Management-System-300-Arbitrary-File-Upload.html; http://seclists.org/fulldisclosure/2016/Feb/30
CVE: CVE-2016-1526
Published: 2016-02-13
Description: The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-200
References: http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
CVE: CVE-2016-1949
Published: 2016-02-13
Description: Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2016-02/msg00102.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00142.html; http://www.mozilla.org/security/announce/2016/mfsa2016-13.html
CVE: CVE-2016-1622
Published: 2016-02-14
Description: The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html
CVE: CVE-2016-1623
Published: 2016-02-14
Description: The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html
CVE: CVE-2016-1624
Published: 2016-02-14
Description: Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html
CVE: CVE-2016-1625
Published: 2016-02-14
Description: The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html