CVE-2016-5128
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store targ...
Original description
The description as published by the source.
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
References
- advisory rhn.redhat.com
- advisory debian.org
- advisory ubuntu.com
- advisory security.gentoo.org
- web lists.opensuse.org
- web lists.opensuse.org
- web lists.opensuse.org
- web lists.opensuse.org
- web securityfocus.com
- web securitytracker.com
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web codereview.chromium.org
- web crbug.com
- web googlechromereleases.blogspot.com