CVE-2016-5166 — Sensitive Information Exposure in Google Chrome

CWE-200 — Sensitive Information Exposure6 documents5 sources
Severity
3.1LOWNVD
EPSS
0.6%
top 29.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeOpensuse Leap
Timeline
PublishedSep 11
Latest updateMay 14

Description

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.6 | Impact: 1.4

Affected Packages2 packages

▶NVDgoogle/chrome52.0.2743.116
▶NVDopensuse/leap42.1

🔴Vulnerability Details

2
GHSA
GHSA-8vjv-h7pp-7mm2: The download implementation in Google Chrome before 53↗2022-05-14
▶
OSV
CVE-2016-5166: The download implementation in Google Chrome before 53↗2016-09-11
▶

📋Vendor Advisories

1
Red Hat
chromium-browser: smb relay attack via save page as↗2016-08-31
▶

💬Community

2
Bugzilla
CVE-2016-5166 chromium-browser: smb relay attack via save page as↗2016-09-01
▶
Bugzilla
chromium: various flaws [fedora-all]↗2016-09-01
▶
CVE-2016-5166 — Sensitive Information Exposure | cvebase