CVE-2016-1665: Input Validation
Published May 14, 2016
·Updated
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
Affected Software
6 affected components
openSUSE openSUSE=13.1
redhat Enterprise Linux Desktop Supplementary=6.0
redhat Enterprise Linux Server Supplementary=6.0
redhat Enterprise Linux Server Supplementary Eus=6.7z
redhat Enterprise Linux Workstation Supplementary=6.0
Google Chrome<=50.0.2661.87
Event History
May 14, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1665?
CVE-2016-1665 has been assigned a medium severity level due to its potential to expose sensitive information.
2
How do I fix CVE-2016-1665?
To fix CVE-2016-1665, update Google Chrome to version 50.0.2661.94 or later.
3
What versions of Google Chrome are affected by CVE-2016-1665?
CVE-2016-1665 affects Google Chrome versions up to 50.0.2661.87.
4
What kind of attack does CVE-2016-1665 enable?
CVE-2016-1665 allows remote attackers to obtain sensitive information through crafted JavaScript code.
5
Which operating systems are impacted by CVE-2016-1665?
CVE-2016-1665 impacts multiple operating systems including certain versions of openSUSE and Red Hat Enterprise Linux.