CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 03:01

Type Values Removed Values Added
References () http://rhn.redhat.com/errata/RHSA-2016-2919.html - () http://rhn.redhat.com/errata/RHSA-2016-2919.html -
References () http://www.securityfocus.com/bid/94633 - () http://www.securityfocus.com/bid/94633 -
References () https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - () https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html -
References () https://crbug.com/664411 - () https://crbug.com/664411 -
References () https://security.gentoo.org/glsa/201612-11 - () https://security.gentoo.org/glsa/201612-11 -
References () https://www.exploit-db.com/exploits/42175/ - () https://www.exploit-db.com/exploits/42175/ -

Information

Published : 2019-01-09 19:29

Updated : 2024-11-21 03:01


NVD link : CVE-2016-9651

Mitre link : CVE-2016-9651

CVE.ORG link : CVE-2016-9651


JSON object : View

Products Affected

redhat

  • enterprise_linux_desktop
  • enterprise_linux_workstation
  • enterprise_linux_server

google

  • chrome
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')