CVE-2016-1677

Description

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."

References

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html

https://access.redhat.com/errata/RHSA-2016:1190

https://codereview.chromium.org/1936083002

https://crbug.com/602970

https://security.gentoo.org/glsa/201607-07

http://www.debian.org/security/2016/dsa-3590

http://www.securitytracker.com/id/1035981

http://www.ubuntu.com/usn/USN-2992-1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3