CVE-2016-5128
chromium-browser: same-origin bypass in v8
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
objects.cc en Google V8 en versiones anteriores a 5.2.361.27, como se utiliza en Google Chrome en versiones anteriores a 52.0.2743.82, no impide que los interceptores de la API modifiquen un objetivo de almacenamiento sin ajustar una propiedad, lo que permite a atacantes remotos eludir la Same Origin Policy a través de un sitio web manipulado.
Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service or execute arbitrary code. It was discovered that the PPAPI implementation does not validate the origin of IPC messages to the plugin broker process. A remote attacker could potentially exploit this to bypass sandbox protection mechanisms. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-05-31 CVE Reserved
- 2016-07-23 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-254: 7PK - Security Features
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/92053 | Vdb Entry | |
| http://www.securitytracker.com/id/1036428 | Vdb Entry | |
| https://codereview.chromium.org/2082633002 | X_refsource_confirm | |
| https://codereview.chromium.org/2084183004 | X_refsource_confirm | |
| https://codereview.chromium.org/2085223002 | X_refsource_confirm | |
| https://codereview.chromium.org/2101983002 | X_refsource_confirm | |
| https://codereview.chromium.org/2103033002 | X_refsource_confirm | |
| https://crbug.com/619166 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | <= 51.0.2704.106 Search vendor "Google" for product "Chrome" and version " <= 51.0.2704.106" | - |
Affected
| ||||||
| Google Search vendor "Google" | V8 Search vendor "Google" for product "V8" | 5.2.360 Search vendor "Google" for product "V8" and version "5.2.360" | - |
Affected
| ||||||