ByteOS Network

NVD Vulnerability Details :

CVE-2016-5150

Deferred

Source-chrome-cve-admin@google.com

Published At-11 Sep, 2016 | 10:59

Updated At-12 Apr, 2025 | 10:46

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

openSUSE

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Google LLC

>>chrome>>Versions up to 52.0.2743.116(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html	chrome-cve-admin@google.com	N/A
http://rhn.redhat.com/errata/RHSA-2016-1854.html	chrome-cve-admin@google.com	N/A
http://www.debian.org/security/2016/dsa-3660	chrome-cve-admin@google.com	N/A
http://www.securityfocus.com/bid/92717	chrome-cve-admin@google.com	N/A
http://www.securitytracker.com/id/1036729	chrome-cve-admin@google.com	N/A
https://codereview.chromium.org/2255413004/	chrome-cve-admin@google.com	N/A
https://crbug.com/637963	chrome-cve-admin@google.com	N/A
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html	chrome-cve-admin@google.com	N/A
https://security.gentoo.org/glsa/201610-09	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2016-1854.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2016/dsa-3660	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/92717	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036729	af854a3a-2127-422b-91ae-364da2661108	N/A
https://codereview.chromium.org/2255413004/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://crbug.com/637963	af854a3a-2127-422b-91ae-364da2661108	N/A
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201610-09	af854a3a-2127-422b-91ae-364da2661108	N/A