Kaspersky ID:
KLA10766
Дата обнаружения:
08/03/2016
Обновлено:
22/01/2024

Описание

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service or possibly execute arbitrary code.

Below is a complete list of vulnerabilities

  1. An improper user agent shadow DOM implementation at Blink can be exploited to cause denial of service or conduct another impact;
  2. Lack of relayout scheduling restrictions at Blink can be exploited remotely via a specially designed HTML to cause denial of service or conduct another impact;
  3. Multiple integer signedness errors at PDFium can be exploited remotely to cause denial of service or conduct another impact via a specially designed JPEG2000 data.

Technical details

Vulnerability (1) related to ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp. This vulnerability can be exploited via vectors related to type confusion.

Vulnerability (2) related to WebKit/Source/core/layout/LayoutObject.cpp

Vulnerability (3) related to opj_j2k_update_image_data function at j2k.c in OpenJPEG.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2016-1644
    critical
  • CVE-2016-1643
    critical
  • CVE-2016-1645
    critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Узнай больше об угрозах и векторах атаки на Энциклопедии Kaspersky
Бесплатно
Читать
Kaspersky Premium
Комплексное решение для защиты вашей цифровой жизни
Премиум
Скачать
Confirm changes?
Your message has been sent successfully.