PT-2016-1259 · Opera+3 · Opera+3
Publicado
2016-02-09
·
Atualizado
2024-06-15
·
CVE-2016-1625
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 48.0.2564.109
Opera (affected versions not specified)
Description
The issue is related to the Chrome Instant feature, which does not properly restrict access to New Tab Page navigation targets. This allows remote attackers to bypass intended restrictions via unspecified vectors, related to
instant service.cc and search tab helper.cc. The vulnerability is associated with inadequate access control in the Chrome Instant component.Recommendations
For Google Chrome versions prior to 48.0.2564.109, update to version 48.0.2564.109 or later to resolve the issue.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat