Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2016-1656

The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.

VectorNETWORK

PublishedApr 18, 2016, 10:59

Published Bychrome-cve-admin@google.com

Base Score

Score7.5

Affected Versions

No affected versions found.

References

http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html
http://rhn.redhat.com/errata/RHSA-2016-0638.html
https://crbug.com/570750
https://security.gentoo.org/glsa/201605-02

Weakness Type

CWE-284

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK