CVE-2016-5128
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store targ...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
参照URL
- advisory rhn.redhat.com
- advisory debian.org
- advisory ubuntu.com
- advisory security.gentoo.org
- web lists.opensuse.org
- web lists.opensuse.org
- web lists.opensuse.org
- web lists.opensuse.org
- web securityfocus.com
- web securitytracker.com
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web crbug.com
- web googlechromereleases.blogspot.com