CVE-2016-1661: Input Validation
Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1661?
CVE-2016-1661 has been classified as a high severity vulnerability due to its potential to cause denial of service and memory corruption.
How do I fix CVE-2016-1661?
To remediate CVE-2016-1661, update Google Chrome to version 50.0.2661.94 or later.
What are the affected software versions for CVE-2016-1661?
CVE-2016-1661 affects Google Chrome versions up to 50.0.2661.87 and specific versions of Red Hat and openSUSE.
What are the potential impacts of CVE-2016-1661?
The potential impacts of CVE-2016-1661 include memory corruption and resulting denial of service attacks.
Is CVE-2016-1661 still a concern for users of older systems?
Yes, users of older systems running affected versions of Google Chrome or specific Red Hat and openSUSE distributions should address CVE-2016-1661.