CVE-2016-1665: Input Validation
An information leak flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=606181
External References:
http://googlechromereleases.blogspot.com/2016/04/stable-channel-update28.html
Other sources
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Chrometo a version that resolves this vulnerability.Fixed in 50.0.2661.94 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 50.0.2661.94
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1665?
CVE-2016-1665 has been assigned a medium severity level due to its potential to expose sensitive information.
How do I fix CVE-2016-1665?
To fix CVE-2016-1665, update Google Chrome to version 50.0.2661.94 or later.
What versions of Google Chrome are affected by CVE-2016-1665?
CVE-2016-1665 affects Google Chrome versions up to 50.0.2661.87.
What kind of attack does CVE-2016-1665 enable?
CVE-2016-1665 allows remote attackers to obtain sensitive information through crafted JavaScript code.
Which operating systems are impacted by CVE-2016-1665?
CVE-2016-1665 impacts multiple operating systems including certain versions of openSUSE and Red Hat Enterprise Linux.