CVE-2016-1667 in Chrome
요약 (영어)
The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2016. 01. 12.
공개
2016. 05. 14.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 87298 | Google Chrome DOM 권한 상승 | 284 | 정의되지 않음 | 공식 수정 | CVE-2016-1667 |