Buffer overflow in Google Chrome - CVE-2016-1669

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU10733

Buffer overflow in Google Chrome - CVE-2016-1669

Published: February 27, 2018 / Updated: April 3, 2018


Vulnerability identifier: #VU10733
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-1669
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the zone.cc. A remote attacker can send specially crafted JavaScript code, trigger buffer overflow and cause the application to crash.

Successful exploitation of the vulnerability may result in system compromise.

Affected software

Google Chrome
Fedora
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server from RHUI
Opensuse
Red Hat Satellite
Red Hat OpenStack
SUSE Package Hub for SUSE Linux Enterprise
v8
chromium-browser (Red Hat package)
chromium-browser-debuginfo (Red Hat package)

How to mitigate CVE-2016-1669

Update to version 50.0.2661.102 (Google V8 5.0.71.47).

v8 - addressed in versions 3.14.5.10-25.el6, 3.14.5.10-25.el7, 3.14.5.10-25.fc23, 3.14.5.10-25.fc24
chromium-browser (Red Hat package) - update to 50.0.2661.102-1.el6
chromium-browser-debuginfo (Red Hat package) - update to 50.0.2661.102-1.el6

External References

Related Security Bulletins