NetSight
IP …
high8.0

CVE-2016-1661

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Pol…

Impact

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary Eus
Version 6.7z
RedhatEnterprise Linux Workstation Supplementary
Version 6.0
GoogleChrome
through 50.0.2661.87
OpensuseOpensuse
Version 13.1

Weakness classification

CWE-20

References