PT-2016-1346 · Google+5 · Google Chrome+5
Cloudfuzzer
·
Publicado
2016-03-02
·
Atualizado
2024-06-15
·
CVE-2016-1634
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 49.0.2623.75
Opera (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function. This vulnerability can be exploited by a remote attacker using a specially crafted web site, potentially causing a denial of service or other unspecified impact. The vulnerability is triggered by Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.
Recommendations
For Google Chrome versions prior to 49.0.2623.75, update to version 49.0.2623.75 or later to resolve the issue.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu