PT-2016-1355 · Opera+4 · Opera+5

Published 2016-03-05 · Updated 2016-12-03 · CVE-2016-2843

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Google V8 versions prior to 4.9.385.26 Opera (affected versions not specified)

Description The issue is related to multiple unspecified vulnerabilities in the Google V8 engine and Google Chrome browser, which can be exploited by attackers to cause a denial of service or possibly have other impact. The vulnerabilities are associated with errors in the code. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Google Chrome versions prior to 49.0.2623.75, update to version 49.0.2623.75 or later. For Google V8 versions prior to 4.9.385.26, update to version 4.9.385.26 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2016-1283

BDU:2016-00654

CVE-2016-2843

DSA-3507-1

RHSA-2016:0359

RHSA-2016_0359

USN-2920-1

Affected Products

Alt Linux

Google Chrome

Google V8

Opera

Red Hat

Ubuntu

References · 105

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-1646.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2016-1631 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1648 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1641 · Security Note
• https://bdu.fstec.ru/vul/2016-00650 · Security Note
• https://bdu.fstec.ru/vul/2016-00643 · Security Note
• https://bdu.fstec.ru/vul/2016-00645 · Security Note
• https://security-tracker.debian.org/tracker/source-package/chromium-browser · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12011 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126 · Security Note
• http://ubuntu.com/usn/USN-2920-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00646 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1637 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1640 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-2843 · Security Note