PT-2016-2658 · Google+2 · Google Chrome+2

Xisigr · Published 2016-07-23 · Updated 2024-06-15 · CVE-2016-1707

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82

Description The issue concerns a component of Google Chrome that fails to replace an invalid URL with the about:blank URL, allowing remote attackers to spoof the URL display via a crafted web site. This can be exploited by a remote attacker using a specially formed web site.

Recommendations For versions prior to 52.0.2743.82, update to version 52.0.2743.82 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2016-2194

BDU:2016-02050

CVE-2016-1707

DSA-3637-1

OPENSUSE-SU-2016:1868-1

OPENSUSE-SU-2016:1869-1

OPENSUSE-SU-2016_1865-1

OPENSUSE-SU-2016_1869-1

OPENSUSE-SU-2016_1918-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

Suse

References · 2353

• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3637-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://debian.org/security/2016/dsa-3637 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-02050 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1707 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2016:1868-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1707 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2016:1869-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-21192 · Note
• https://suse.com/security/cve/CVE-2023-0129 · Note