Vulnerability Description
The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | <= 51.0.2704.63 | |
| Canonical | Ubuntu Linux | 14.04 |
| Debian | Debian Linux | 8.0 |
| Opensuse | Leap | 42.1 |
| Opensuse | Opensuse | 13.2 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Suse | Linux Enterprise | 12.0 |
Related Weaknesses (CWE)
References
- http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
- http://www.debian.org/security/2016/dsa-3594
- http://www.securitytracker.com/id/1036026
- http://www.ubuntu.com/usn/USN-2992-1
- https://access.redhat.com/errata/RHSA-2016:1201
- https://codereview.chromium.org/2021373003
- https://crbug.com/613266
- http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html
- http://www.debian.org/security/2016/dsa-3594
FAQ
What is CVE-2016-1697?
CVE-2016-1697 is a vulnerability with a CVSS score of 8.8 (HIGH). The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach...
How severe is CVE-2016-1697?
CVE-2016-1697 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-1697?
Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Canonical Ubuntu Linux, Debian Debian Linux, Opensuse Leap, Opensuse Opensuse.