CVE-2016-1650 — Google Chrome vulnerability

6 documents5 sources
Severity
8.8HIGHNVD
EPSS
1.2%
top 21.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google ChromeDebian LinuxOpensuse
Timeline
PublishedMar 29
Latest updateMay 14

Description

The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDgoogle/chrome49.0.2623.95

Also affects: Debian Linux 8.0

🔴Vulnerability Details

2
GHSA
GHSA-8h9q-493w-ggvj: The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api↗2022-05-14
▶
OSV
CVE-2016-1650: The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api↗2016-03-29
▶

📋Vendor Advisories

1
Red Hat
chromium-browser: various fixes from internal audits↗2016-03-24
▶

💬Community

2
Bugzilla
CVE-2016-2106 openssl: EVP_EncryptUpdate overflow [jbews-2.1.0]↗2016-05-18
▶
Bugzilla
CVE-2016-1650 chromium-browser: various fixes from internal audits↗2016-03-29
▶