PT-2016-1610 · Google+4 · Google Chrome+4
Publicado
2016-03-24
·
Atualizado
2024-06-15
·
CVE-2016-1650
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 49.0.2623.108
Opera versions prior to 49.0.2623.108
Description
The issue is related to the PageCaptureSaveAsMHTMLFunction::ReturnFailure function in the browser/extensions/api/page capture/page capture api.cc file. It allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document. The vulnerability is associated with errors in the code and can be exploited by a remote attacker.
Recommendations
For Google Chrome versions prior to 49.0.2623.108, update to version 49.0.2623.108 or later.
For Opera versions prior to 49.0.2623.108, update to a version that includes the fix for this issue, as the specific version is not provided.
As a temporary workaround, consider disabling the
PageCaptureSaveAsMHTMLFunction::ReturnFailure function until a patch is available.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse