Published: 05/06/2016 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome prior to 51.0.2704.79, does not validate the interval count, which allows remote malicious users to cause a denial of service (out-of-bounds read) via crafted serialized data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
canonical ubuntu linux 16.04
canonical ubuntu linux 15.10
redhat enterprise linux desktop 6.0
canonical ubuntu linux 14.04
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
suse linux enterprise 12.0
opensuse leap 42.1
opensuse opensuse 13.2
google chrome

Several security issues were fixed in Oxide ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2016-1696 A cross-origin bypass was found in the bindings to extensions CVE-2016-1697 Mariusz Mlynski discovered a cross-origin bypass in Blink/Webkit CVE-2016-1698 Rob Wu discovered an information leak CVE-2016-1699 Gregory Panakkal discovered an issu ...

The SkRegion::readFromMemory function in core/SkRegioncpp in Skia, as used in Google Chrome before 510270479, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data ...

CWE-119 http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html https://access.redhat.com/errata/RHSA-2016:1201 https://codereview.chromium.org/1961463003 http://www.securitytracker.com/id/1036026 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html http://www.ubuntu.com/usn/USN-2992-1 https://crbug.com/609260 http://www.debian.org/security/2016/dsa-3594 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html https://nvd.nist.gov https://usn.ubuntu.com/2992-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-1702

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect