CVE-2016-1667 in Chrome
Zusammenfassung (Englisch)
The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
12.01.2016
Veröffentlichung
14.05.2016
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 87298 | Google Chrome DOM erweiterte Rechte | 284 | Nicht definiert | Offizieller Fix | CVE-2016-1667 |