medium6.5
CVE-2016-5172
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from a…
Impact
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 53.0.2785.101 | |
| Nodejs | Node.Js | from 6.0.0 through 6.8.1 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-1905.html
- http://www.debian.org/security/2016/dsa-3667
- http://www.securityfocus.com/bid/92942
- http://www.securitytracker.com/id/1036826
- https://codereview.chromium.org/2077283004
- https://crbug.com/616386
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
- https://security.gentoo.org/glsa/201610-09
- http://rhn.redhat.com/errata/RHSA-2016-1905.html
- http://www.debian.org/security/2016/dsa-3667
- http://www.securityfocus.com/bid/92942
- http://www.securitytracker.com/id/1036826
- https://codereview.chromium.org/2077283004
- https://crbug.com/616386
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
- https://security.gentoo.org/glsa/201610-09