Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2016-1643

Published: 13/03/2016 Updated: 07/11/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Chrome

Vulnerability Summary

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome prior to 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Ubuntu Security Notice: oxide-qt vulnerabilities
Several security issues were fixed in Oxide ...
Debian Security Advisories: DSA-3513-1 chromium-browser -- security update
Several vulnerabilities have been discovered in the chromium web browser CVE-2016-1643 cloudfuzzer discovered a type confusion issue in Blink/Webkit CVE-2016-1644 Atte Kettunen discovered a use-after-free issue in Blink/Webkit CVE-2016-1645 An out-of-bounds write issue was discovered in the pdfium library For the stable distributi ...

References

CWE-361http://www.securitytracker.com/id/1035259https://code.google.com/p/chromium/issues/detail?id=589838http://www.debian.org/security/2016/dsa-3513http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.htmlhttp://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.htmlhttp://www.securityfocus.com/bid/84224http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.htmlhttp://www.ubuntu.com/usn/USN-2920-1https://codereview.chromium.org/1732753004https://usn.ubuntu.com/2920-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook