Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin     Policy and obtain sensitive information. (CVE-2016-5168)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote Mac OS X host is prior to 50.0.2661.94. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds write error exists in Blink that allows     a context-dependent attacker to execute arbitrary code.
    (CVE-2016-1660)

  - A flaw exists due to improper validation of     user-supplied input when handling cross-process frames.
    A context-dependent attacker can exploit this to corrupt     memory, resulting in the execution of arbitrary code.
    (CVE-2016-1661)

  - A use-after-free error exists in the extensions     component. A context-dependent attacker can exploit this     to dereference already freed memory, resulting in the     execution of arbitrary code. (CVE-2016-1662)

  - A use-after-free free error exists in Blink's V8     bindings. A context-dependent attacker can exploit this     to dereference already freed memory, resulting in the     execution of arbitrary code. (CVE-2016-1663)

  - An unspecified flaw exists that allows a     context-dependent attacker to spoof the address bar.
    (CVE-2016-1664)

  - An unspecified flaw exists in V8 that allows a     context-dependent attacker to disclose sensitive     information. (CVE-2016-1665)

  - Multiple unspecified vulnerabilities exist that allow a     a context-dependent attacker to execute arbitrary code.
    (CVE-2016-1666)

  - A same-origin bypass vulnerability exists in Skia in the     pinToByte() function in effects/SkArithmeticMode.cpp due     to improper handling of intermediate color values. An     unauthenticated, remote attacker can exploit this, via     timing attacks using the SVG 'feComposite' filter, to     bypass the same-origin policy. (CVE-2016-5168)

The version of Google Chrome installed on the remote Windows host is prior to 50.0.2661.94. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds write error exists in Blink that allows     a context-dependent attacker to execute arbitrary code.
    (CVE-2016-1660)

  - A flaw exists due to improper validation of     user-supplied input when handling cross-process frames.
    A context-dependent attacker can exploit this to corrupt     memory, resulting in the execution of arbitrary code.
    (CVE-2016-1661)

  - A use-after-free error exists in the extensions     component. A context-dependent attacker can exploit this     to dereference already freed memory, resulting in the     execution of arbitrary code. (CVE-2016-1662)

  - A use-after-free free error exists in Blink's V8     bindings. A context-dependent attacker can exploit this     to dereference already freed memory, resulting in the     execution of arbitrary code. (CVE-2016-1663)

  - An unspecified flaw exists that allows a     context-dependent attacker to spoof the address bar.
    (CVE-2016-1664)

  - An unspecified flaw exists in V8 that allows a     context-dependent attacker to disclose sensitive     information. (CVE-2016-1665)

  - Multiple unspecified vulnerabilities exist that allow a     a context-dependent attacker to execute arbitrary code.
    (CVE-2016-1666)

  - A same-origin bypass vulnerability exists in Skia in the     pinToByte() function in effects/SkArithmeticMode.cpp due     to improper handling of intermediate color values. An     unauthenticated, remote attacker can exploit this, via     timing attacks using the SVG 'feComposite' filter, to     bypass the same-origin policy. (CVE-2016-5168)

ID	Name	Product	Family	Severity
263656	Linux Distros Unpatched Vulnerability : CVE-2016-5168	Nessus	Misc.	high
90795	Google Chrome < 50.0.2661.94 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
90794	Google Chrome < 50.0.2661.94 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2016-5168

high

Tenable Plugins

high

critical

critical