CVE-2016-1656

HIGH

Google Chrome <50.0.2661.75 - Open Redirect

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-1656. PoCs published by OpenSISE.

AI-analyzed exploit summary This PoC demonstrates a directory traversal vulnerability in Chrome's download handling (CVE-2016-1656). The script allows arbitrary file writes via the 'name' parameter, exploiting improper sanitization of filenames in the Content-Disposition header.

Description

The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.

Exploits (1)

github WORKING POC 31 stars

by OpenSISE · cpoc

https://github.com/OpenSISE/CVE_PoC_Collect/tree/master/Browser/CVE-2016-1656

View Code ZIP pw:eip

This PoC demonstrates a directory traversal vulnerability in Chrome's download handling (CVE-2016-1656). The script allows arbitrary file writes via the 'name' parameter, exploiting improper sanitization of filenames in the Content-Disposition header.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Google Chrome (versions prior to fix)

No auth needed

Prerequisites: User interaction to trigger download

MITRE ATT&CK