CVE search · CVE-2016-5172
CVE-2016-5172
medium 6.5
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
Details
- Status
- Modified
- Published
- Last changed
- Source
- chrome-cve-admin@google.com
- Weakness
- CWE-200
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
nvd@nist.govPrimary |
| CVSS 2.0 | medium 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- http://rhn.redhat.com/errata/RHSA-2016-1905.html
- http://www.debian.org/security/2016/dsa-3667
- http://www.securityfocus.com/bid/92942
- http://www.securitytracker.com/id/1036826
- https://codereview.chromium.org/2077283004
- https://crbug.com/616386
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
- https://security.gentoo.org/glsa/201610-09
- http://rhn.redhat.com/errata/RHSA-2016-1905.html
- http://www.debian.org/security/2016/dsa-3667
- http://www.securityfocus.com/bid/92942
- http://www.securitytracker.com/id/1036826
- https://codereview.chromium.org/2077283004
- https://crbug.com/616386
- https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html
- https://security.gentoo.org/glsa/201610-09