CVE-2016-5162: Medium severity suse linux vulnerability
The AllowCrossRendererResourceLoad function in extensions/browser/urlrequestutil.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json webaccessibleresources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5162?
CVE-2016-5162 is rated as a high severity vulnerability due to potential unauthorized access to restricted resources.
How do I fix CVE-2016-5162?
To fix CVE-2016-5162, upgrade Google Chrome to version 53.0.2785.89 or later on Windows and OS X, or to version 53.0.2785.92 or later on Linux.
What software versions are affected by CVE-2016-5162?
CVE-2016-5162 affects Google Chrome versions prior to 53.0.2785.89 on Windows and OS X, and prior to 53.0.2785.92 on Linux, as well as openSUSE Leap 42.1.
What type of attack can exploit CVE-2016-5162?
CVE-2016-5162 can be exploited through cross-origin resource loading, potentially leading to data theft or unauthorized content access.
Where can I find more information about CVE-2016-5162?
More detailed information about CVE-2016-5162 can be found in security announcements related to this vulnerability.