CVE-2016-1683: Buffer Overflow
An out-of-bounds access flaw was found in the libxslt component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=583156
External References:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html
Other sources
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1683?
The severity of CVE-2016-1683 is classified as high due to potential denial of service and out-of-bounds heap memory access.
How do I fix CVE-2016-1683?
To fix CVE-2016-1683, upgrade to at least version 51.0.2704.63 of Google Chrome or update libxslt to version 1.1.29 or later.
What software is affected by CVE-2016-1683?
CVE-2016-1683 affects Google Chrome versions prior to 51.0.2704.63 and libxslt versions up to and including 1.1.28.
What happens if I exploit CVE-2016-1683?
Exploitation of CVE-2016-1683 can lead to denial of service through an out-of-bounds heap memory access.
Is CVE-2016-1683 related to any specific operating systems?
CVE-2016-1683 is related to several operating systems including various versions of Ubuntu, Debian, SUSE, and Red Hat Enterprise Linux.