CVE-2016-1629
published 2016-02-21CVE-2016-1629: Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
PriorityP347critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.64%
83.9th percentile
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| chrome | <= 48.0.2564.109 | — | |
| novell | suse_package_hub_for_suse_linux_enterprise | — | — |
| opensuse | leap | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wmvx-5x24-hgvx: Google Chrome before 48
ghsa_unreviewed·2022-05-14
CVE-2016-1629 [CRITICAL] GHSA-wmvx-5x24-hgvx: Google Chrome before 48
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
OSV
oxide-qt vulnerability
osv·2016-02-23·CVSS 9.8
CVE-2016-1629 [CRITICAL] oxide-qt vulnerability
oxide-qt vulnerability
A security issue was discovered in Chromium. If a user were tricked in to
opening a specially crafted website, an attacker could potentially exploit
this to bypass same-origin restrictions or a sandbox protection mechanism.
(CVE-2016-1629)
OSV
CVE-2016-1629: Google Chrome before 48
osv·2016-02-21·CVSS 9.8
CVE-2016-1629 [CRITICAL] CVE-2016-1629: Google Chrome before 48
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
Ubuntu
Oxide vulnerability
vendor_ubuntu·2016-02-23·CVSS 9.8
CVE-2016-1629 [CRITICAL] Oxide vulnerability
Title: Oxide vulnerability
Summary: Oxide could be made to bypass same-origin restrictions.
A security issue was discovered in Chromium. If a user were tricked in to
opening a specially crafted website, an attacker could potentially exploit
this to bypass same-origin restrictions or a sandbox protection mechanism.
(CVE-2016-1629)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
vendor_redhat·2016-02-18·CVSS 9.8
CVE-2016-1629 [CRITICAL] chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
No detection rules found.
Bugzilla
CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function
bugzilla·2016-04-12·CVSS 6.5
CVE-2016-3658 [MEDIUM] CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function
CVE-2016-3658 libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function
A vulnerability was found in the libtiff library. Using a tiffset command on a maliciously crafted image could result in a denial-of-service.
Vulnerable code:
/libtiff/tif_dirwrite.c: 1625
1623 for (q=p, ma=value, mb=0; mb0xFFFFFFFF)
1626 {
1627 TIFFErrorExt(tif->tif_clientdata,module,
1628 "Attempt to write value larger than 0xFFFFFFFF in Classic TIFF file.");
1629 _TIFFfree(p);
1630 return(0);
1631 }
1632 *q= (uint32)(*ma);
1633 }
References:
http://www.openwall.com/lists/oss-security/2016/04/08/12
Discussion:
External References:
http://bugzilla.maptools.org/show_bug.cgi?id=2546
---
*** This bug has been marked as a duplicate of bug 1185805 ***
---
Statement:
This flaw was found to
Bugzilla
CVE-2016-1629 chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
bugzilla·2016-02-19·CVSS 9.8
CVE-2016-1629 [CRITICAL] CVE-2016-1629 chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
CVE-2016-1629 chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
A critical vulnerability was found in Chrome:
Critical CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in
Chrome. Credit to anonymous.
Upstream bug report:
https://code.google.com/p/chromium/issues/detail?id=583431
External Reference:
http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_18.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2016:0286 https://rhn.redhat.com/errata/RHSA-2016-0286.html
http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_18.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00045.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00048.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0286.htmlhttp://www.debian.org/security/2016/dsa-3486http://www.securityfocus.com/bid/83302http://www.securitytracker.com/id/1035184http://www.ubuntu.com/usn/USN-2905-1https://code.google.com/p/chromium/issues/detail?id=583431https://security.gentoo.org/glsa/201603-09http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_18.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00045.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00048.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0286.htmlhttp://www.debian.org/security/2016/dsa-3486http://www.securityfocus.com/bid/83302http://www.securitytracker.com/id/1035184http://www.ubuntu.com/usn/USN-2905-1https://code.google.com/p/chromium/issues/detail?id=583431https://security.gentoo.org/glsa/201603-09
2016-02-21
Published