CVE-2016-1664: Medium severity google chrome vulnerability
Published May 14, 2016
·Updated
The HistoryController::UpdateForCommit function in content/renderer/historycontroller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.
Affected Software
6 affected components
Google Chrome<=50.0.2661.87
redhat Enterprise Linux Desktop Supplementary=6.0
redhat Enterprise Linux Server Supplementary=6.0
redhat Enterprise Linux Server Supplementary Eus=6.7z
redhat Enterprise Linux Workstation Supplementary=6.0
openSUSE openSUSE=13.1
Event History
May 14, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1664?
The severity of CVE-2016-1664 is classified as high due to the potential for remote spoofing attacks.
2
How do I fix CVE-2016-1664?
To fix CVE-2016-1664, update Google Chrome to version 50.0.2661.94 or later.
3
Which versions of Google Chrome are affected by CVE-2016-1664?
CVE-2016-1664 affects Google Chrome versions prior to 50.0.2661.94.
4
What type of attack does CVE-2016-1664 enable?
CVE-2016-1664 enables remote attackers to spoof the address bar through crafted websites.
5
Which platforms are impacted by CVE-2016-1664?
CVE-2016-1664 impacts multiple platforms including Google Chrome and certain versions of Red Hat and openSUSE.