CVE-2016-1647

Severity

93%

Complexity

86%

Confidentiality

165%

CWE-416: Use After Free

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CWE-416: Use After Free

CVSS 3.0 Base Score 8.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 8 years ago

2016-03-29 10:59:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)

14.04

Canonical Ubuntu Linux 15.10

15.10

Canonical Ubuntu Linux 16.04 LTS (Long-Term Support)

16.04

Debian Linux 8.0 (Jessie)

8.0

OpenSUSE 13.1

13.1

References

http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html

Vendor Advisory

openSUSE-SU-2016:0929

openSUSE-SU-2016:0930

openSUSE-SU-2016:1059

Third Party Advisory

RHSA-2016:0525

DSA-3531

Third Party Advisory

1035423

USN-2955-1

Third Party Advisory

https://code.google.com/p/chromium/issues/detail?id=590284

Issue Tracking

https://codereview.chromium.org/1747183002/

Issue Tracking

https://codereview.chromium.org/1811783002/

Issue Tracking

GLSA-201605-02

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.