PT-2016-1349 · Opera+5 · Opera+6
Keve Nagy
·
Publicado
2016-03-02
·
Atualizado
2024-06-15
·
CVE-2016-1637
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 49.0.2623.75
Skia (affected versions not specified)
Opera (affected versions not specified)
Description
The issue is related to the SkATan2 255 function in the Skia component, which mishandles arctangent calculations. This can be exploited by remote attackers to obtain sensitive information via a specially crafted web site. The exploitation is possible due to the lack of protection of service data.
Recommendations
For Google Chrome versions prior to 49.0.2623.75, update to version 49.0.2623.75 or later to resolve the issue.
For Skia, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Skia
Suse
Ubuntu