PT-2016-4890 · Opera+5 · Opera+6

Atte Kettunen

·

Publicado

2016-04-28

·

Atualizado

2024-06-15

·

CVE-2016-1660

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Blink versions prior to 50.0.2661.94 Google Chrome versions prior to 50.0.2661.94 Opera versions prior to 50.0.2661.94 is not specified, however, it is mentioned that Opera is affected.
Description The issue is related to the mishandling of assertions in the WTF::BitArray and WTF::double conversion::Vector classes. This can be exploited by remote attackers via a crafted web site, potentially leading to a denial of service (out-of-bounds write) or other unspecified impacts.
Recommendations For Google Chrome versions prior to 50.0.2661.94, update to version 50.0.2661.94 or later. For Blink versions prior to 50.0.2661.94, update to version 50.0.2661.94 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability in Opera.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2016-2194
CVE-2016-1660
DSA-3564-1
MGASA-2016-0160
OPENSUSE-SU-2016_1208-1
OPENSUSE-SU-2016_1209-1
OPENSUSE-SU-2016_1655-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2016:0707
RHSA-2016_0707
USN-2960-1

Produtos afetados

Alt Linux
Blink
Google Chrome
Opera
Red Hat
Suse
Ubuntu