CVE-2016-1662: Use After Free
An use-after-free flaw was found in the extensions component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=603732
External References:
http://googlechromereleases.blogspot.com/2016/04/stable-channel-update28.html
Other sources
extensions/renderer/gccallback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Chrometo a version that resolves this vulnerability.Fixed in 50.0.2661.94 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 50.0.2661.94
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1662?
CVE-2016-1662 is classified as a high severity vulnerability that can lead to denial of service due to a use-after-free condition.
How do I fix CVE-2016-1662?
To fix CVE-2016-1662, update Google Chrome to version 50.0.2661.94 or later.
What potential impact does CVE-2016-1662 have?
CVE-2016-1662 may allow remote attackers to exploit the vulnerability to cause denial of service or potentially other unspecified impacts.
Which versions of Google Chrome are affected by CVE-2016-1662?
CVE-2016-1662 affects Google Chrome versions prior to 50.0.2661.94.
Are there any affected operating systems related to CVE-2016-1662?
CVE-2016-1662 also affects certain versions of Red Hat Enterprise Linux and openSUSE.