CVE-2016-1658

MEDIUM

Description

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

References

http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html

http://rhn.redhat.com/errata/RHSA-2016-0638.html

http://www.debian.org/security/2016/dsa-3549

https://codereview.chromium.org/1658913002

https://crbug.com/573317

https://security.gentoo.org/glsa/201605-02

Details

Source: MITRE

Published: 2016-04-18

Updated: 2018-10-30

Type: CWE-200

Risk Information

CVSS v2.0

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3.0

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Impact Score: 1.4

Exploitability Score: 2.8

Severity: MEDIUM