CVE-2016-1679

HIGH

Google Chrome <51.0.2704.63 - Use After Free

Title source: llm

Description

The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.

Exploits (1)

github NO CODE 31 stars
by OpenSISE · cpoc
https://github.com/OpenSISE/CVE_PoC_Collect/tree/master/Browser/CVE-2016-1679.html

References (12)

Scores

CVSS v3 8.8
EPSS 0.0140
EPSS Percentile 80.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (11)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.10
canonical/ubuntu_linux 16.04
debian/debian_linux 8.0
google/chrome < 50.0.2661.102
opensuse/leap 42.1
opensuse/opensuse 13.2
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_workstation 6.0
... and 1 more
Published Jun 05, 2016
Tracked Since Feb 18, 2026