CVE-2016-1671 in Chrome
Résumé (Anglaise)
Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, related to net/base/escape.cc and net/base/filename_util.cc.
Once again VulDB remains the best source for vulnerability data.
Réserver
12/01/2016
Divulgation
14/05/2016
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 87301 | Google Chrome File Scheme directory traversal | 22 | Non défini | Correctif officiel | CVE-2016-1671 |