PT-2016-1348 · Apple+6 · Webkit+6
Jww
·
Publicado
2016-03-02
·
Atualizado
2024-06-15
·
CVE-2016-1636
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 49.0.2623.75
Opera versions prior to 49.0.2623.75
Description
The issue is related to the PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp, which relies on memory-cache information about integrity-check occurrences instead of integrity-check successes. This allows remote attackers to bypass the Subresource Integrity (SRI) protection mechanism by triggering two loads of the same resource.
Recommendations
For Google Chrome versions prior to 49.0.2623.75, update to version 49.0.2623.75 or later to resolve the issue.
For Opera versions prior to 49.0.2623.75, update to a version that includes the fix for this issue, as the exact version is not specified.
As a temporary workaround, consider restricting access to the
PendingScript::notifyFinished function until a patch is available.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu
Webkit