PT-2016-2161 · Google+5 · Google Chrome+6
Guang Gong
·
Publicado
2016-05-25
·
Atualizado
2025-09-29
·
CVE-2016-1677
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google V8 versions prior to 5.1.281.26
Google Chrome versions prior to 51.0.2704.63
Description
The issue is caused by the use of an incorrect array type in the uri.js component of the V8 browser engine. This allows remote attackers to obtain sensitive information by calling the
decodeURI function and leveraging "type confusion." The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.Recommendations
For Google V8 versions prior to 5.1.281.26, update to version 5.1.281.26 or later.
For Google Chrome versions prior to 51.0.2704.63, update to version 51.0.2704.63 or later.
As a temporary workaround, consider avoiding the use of the
decodeURI function until a patch is available.Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu
V8