Description (CNA)
The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
- https://access.redhat.com/errata/RHSA-2016:1201
- https://codereview.chromium.org/1866103002
- http://www.securitytracker.com/id/1036026
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
- https://crbug.com/601073
- http://www.debian.org/security/2016/dsa-3594
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html
ADP enrichment
No English description supplied.
- http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
- https://access.redhat.com/errata/RHSA-2016:1201
- https://codereview.chromium.org/1866103002
- http://www.securitytracker.com/id/1036026
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
- https://crbug.com/601073
- http://www.debian.org/security/2016/dsa-3594
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html