Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2016-5134

Published: 23/07/2016 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Google

Vulnerability Summary

net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome prior to 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote malicious users to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Ubuntu Security Notice: oxide-qt vulnerabilities
Several security issues were fixed in Oxide ...
Debian Security Advisories: DSA-3637-1 chromium-browser -- security update
Several vulnerabilities have been discovered in the chromium web browser CVE-2016-1704 The chrome development team found and fixed various issues during internal auditing CVE-2016-1705 The chrome development team found and fixed various issues during internal auditing CVE-2016-1706 Pinkie Pie discovered a way to escape the P ...

References

CWE-200https://www.kb.cert.org/vuls/id/877625http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.htmlhttps://codereview.chromium.org/1996773002http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.htmlhttp://www.securityfocus.com/bid/92053http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.htmlhttp://www.ubuntu.com/usn/USN-3041-1http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.htmlhttps://crbug.com/593759https://security.gentoo.org/glsa/201610-09http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1485.htmlhttp://www.securitytracker.com/id/1036428http://www.debian.org/security/2016/dsa-3637https://nvd.nist.govhttps://usn.ubuntu.com/3041-1/https://www.kb.cert.org/vuls/id/877625
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook