Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2016-1704     The chrome development team found and fixed various     issues during internal auditing.

  - CVE-2016-1705     The chrome development team found and fixed various     issues during internal auditing.

  - CVE-2016-1706     Pinkie Pie discovered a way to escape the Pepper Plugin     API sandbox.

  - CVE-2016-1707     xisigr discovered a URL spoofing issue.

  - CVE-2016-1708     Adam Varsan discovered a use-after-free issue.

  - CVE-2016-1709     ChenQin discovered a buffer overflow issue in the sfntly     library.

  - CVE-2016-1710     Mariusz Mlynski discovered a same-origin bypass.

  - CVE-2016-1711     Mariusz Mlynski discovered another same-origin bypass.

  - CVE-2016-5127     cloudfuzzer discovered a use-after-free issue.

  - CVE-2016-5128     A same-origin bypass issue was discovered in the v8     JavaScript library.

  - CVE-2016-5129     Jeonghoon Shin discovered a memory corruption issue in     the v8 JavaScript library.

  - CVE-2016-5130     Widih Matar discovered a URL spoofing issue.

  - CVE-2016-5131     Nick Wellnhofer discovered a use-after-free issue in the     libxml2 library.

  - CVE-2016-5132     Ben Kelly discovered a same-origin bypass.

  - CVE-2016-5133     Patch Eudor discovered an issue in proxy authentication.

  - CVE-2016-5134     Paul Stone discovered an information leak in the Proxy     Auto-Config feature.

  - CVE-2016-5135     ShenYeYinJiu discovered a way to bypass the Content     Security Policy.

  - CVE-2016-5136     Rob Wu discovered a use-after-free issue.

  - CVE-2016-5137     Xiaoyin Liu discovered a way to discover whether an HSTS     website had been visited.

Chromium was updated to 52.0.2743.82 to fix the following security issues (boo#989901) :

  - CVE-2016-1706: Sandbox escape in PPAPI

  - CVE-2016-1707: URL spoofing on iOS

  - CVE-2016-1708: Use-after-free in Extensions

  - CVE-2016-1709: Heap-buffer-overflow in sfntly

  - CVE-2016-1710: Same-origin bypass in Blink

  - CVE-2016-1711: Same-origin bypass in Blink

  - CVE-2016-5127: Use-after-free in Blink

  - CVE-2016-5128: Same-origin bypass in V8

  - CVE-2016-5129: Memory corruption in V8

  - CVE-2016-5130: URL spoofing

  - CVE-2016-5131: Use-after-free in libxml

  - CVE-2016-5132: Limited same-origin bypass in Service     Workers

  - CVE-2016-5133: Origin confusion in proxy authentication

  - CVE-2016-5134: URL leakage via PAC script

  - CVE-2016-5135: Content-Security-Policy bypass

  - CVE-2016-5136: Use after free in extensions

  - CVE-2016-5137: History sniffing with HSTS and CSP

  - CVE-2016-1705: Various fixes from internal audits,     fuzzing and other initiatives

Chromium Web ブラウザでいくつかの脆弱性が発見されました。

- CVE-2016-1704 chrome 開発チームが、内部監査時にさまざまな問題を発見および修正しました。

- CVE-2016-1705 chrome 開発チームが、内部監査時にさまざまな問題を発見および修正しました。

- CVE-2016-1706 Pinkie Pie 氏は、Pepper Plugin API サンドボックスを逃れる方法を発見しました。

- CVE-2016-1707 xisigr 氏は、URL のなりすまし問題を発見しました。

- CVE-2016-1708 Adam Varsan 氏は、use-after-free の問題を発見しました。

- CVE-2016-1709 ChenQin 氏は、sfntly ライブラリでバッファオーバーフロー問題を発見しました。

- CVE-2016-1710 Mariusz Mlynski 氏は、同一生成元バイパスを発見しました。

- CVE-2016-1711 Mariusz Mlynski 氏は、もう 1 つの同一生成元バイパスを発見しました。

- CVE-2016-5127 cloudfuzzer が、use-after-free 問題を発見しました。

- CVE-2016-5128 同一生成元バイパス問題が v8 JavaScript ライブラリで発見されました。

- CVE-2016-5129 Jeonghoon Shin 氏は、v8 JavaScript ライブラリのメモリ破損の問題を発見しました。

- CVE-2016-5130 Widih Matar 氏は、URL のなりすまし問題を発見しました。

- CVE-2016-5131 Nick Wellnhofer 氏が、libxml2 ライブラリで use-after-free 問題を発見しました。

- CVE-2016-5132 Ben Kelly 氏は、同一生成元バイパスを発見しました。

- CVE-2016-5133 Patch Eudor 氏は、プロキシ認証の問題を発見しました。

- CVE-2016-5134 Paul Stone 氏は、プロキシ自動構成機能で情報漏洩を発見しました。

- CVE-2016-5135 ShenYeYinJiu 氏は、Content Security Policy（CSP）をバイパスする方法を発見しました。

- CVE-2016-5136 Rob Wu 氏は、use-after-free の問題を発見しました。

- CVE-2016-5137 Xiaoyin Liu 氏 は、HSTS Web サイトにアクセスがあったかを確認する方法を発見しました。

Chromium が 52.0.2743.82 に更新され、以下のセキュリティ問題が修正されました（boo#989901）：

- CVE-2016-1706：PPAPI でのサンドボックスエスケープ

- CVE-2016-1707：iOS における URL なりすまし

- CVE-2016-1708：拡張の use-after-free

- CVE-2016-1709：sfntly でのヒープバッファオーバーフロー

- CVE-2016-1710：Blink での同一生成元バイパス

- CVE-2016-1711：Blink での同一生成元バイパス

- CVE-2016-5127：Blink の use-after-free

- CVE-2016-5128：V8 での同一生成元バイパス

- CVE-2016-5129：V8 におけるメモリ破損

- CVE-2016-5130：URL なりすまし

- CVE-2016-5131：libxml における use-after-free

- CVE-2016-5132：サービスワーカーの制限付き同一生成元バイパス

- CVE-2016-5133：プロキシ認証での生成元の取り違え

- CVE-2016-5134：PAC スクリプトを通じた URL 漏洩

- CVE-2016-5135：Content-Security-Policy バイパス

- CVE-2016-5136：拡張の use-after-free

- CVE-2016-5137：HSTS と CSP の履歴スニッフィング

- CVE-2016-1705：内部監査、ファジング、その他のイニシアチブからの様々な修正

在 chromium 網頁瀏覽器中發現數個弱點。

- CVE-2016-1704 chrome 開發團隊在內部稽核期間發現並修正了多個問題。

- CVE-2016-1705 chrome 開發團隊在內部稽核期間發現並修正了多個問題。

- CVE-2016-1706 Pinkie Pie 發現一種可逸出 Pepper 外掛程式 API 沙箱的方法。

- CVE-2016-1707 xisigr 發現一個 URL 偽造問題。

- CVE-2016-1708 Adam Varsan 發現一個釋放後使用問題。

- CVE-2016-1709 ChenQin 在 sfntly 程式庫中發現一個緩衝區溢位問題。

- CVE-2016-1710 Mariusz Mlynski 發現一個同源繞過問題。

- CVE-2016-1711 Mariusz Mlynski 發現另一個同源繞過問題。

- CVE-2016-5127 cloudfuzzer 發現一個釋放後使用問題。

- CVE-2016-5128 在 v8 JavaScript 程式庫中發現一個同源繞過問題。

- CVE-2016-5129 Jeonghoon Shin 在 v8 JavaScript 程式庫中發現一個記憶體損毀問題

- CVE-2016-5130 Widih Matar 發現一個 URL 偽造問題。

- CVE-2016-5131 Nick Wellnhofer 在 libxml2 程式庫中發現一個釋放後使用問題。

- CVE-2016-5132 Ben Kelly 發現一個同源繞過。

- CVE-2016-5133 修補程式 Eudor 在代理伺服器驗證中發現一個問題。

- CVE-2016-5134 Paul Stone 在代理伺服器自動設定功能中發現一個資訊洩漏問題。

- CVE-2016-5135 ShenYeYinJiu 發現一種可以繞過內容安全性原則的方法。

- CVE-2016-5136 Rob Wu 發現一個釋放後使用問題。

- CVE-2016-5137 Xiaoyin Liu 發現一種可以瞭解是否曾有使用者造訪 HSTS 網站的方法。

已发现在 Chromium Web 浏览器中存在多个漏洞。

- CVE-2016-1704 在内部审核期间，chrome 开发团队发现并修复了各种问题。

- CVE-2016-1705 在内部审核期间，chrome 开发团队发现并修复了各种问题。

- CVE-2016-1706 Pinkie Pie 发现一种可逸出 Pepper 插件 API 沙盒的方法。

- CVE-2016-1707 xisigr 发现一个 URL 欺骗问题。

- CVE-2016-1708 Adam Varsan 发现一个释放后使用问题。

- CVE-2016-1709 ChenQin 在 sfntly 库中发现一个缓冲区溢出问题。

- CVE-2016-1710 Mariusz Mlynski 发现一个同源绕过问题。

- CVE-2016-1711 Mariusz Mlynski 发现另一个同源绕过问题。

- CVE-2016-5127 cloudfuzzer 发现一个释放后使用问题。

- CVE-2016-5128 在 v8 JavaScript 库中发现一个同源绕过问题。

- CVE-2016-5129 Jeonghoon Shin 在 v8 JavaScript 库中发现一个内存损坏问题

- CVE-2016-5130 Widih Matar 发现一个 URL 欺骗问题。

- CVE-2016-5131 Nick Wellnhofer 在 libxml2 库中发现一个释放后使用问题。

- CVE-2016-5132 Ben Kelly 发现一个同源绕过问题。

- CVE-2016-5133 修补程序 Eudor 在代理认证中发现一个问题。

- CVE-2016-5134 Paul Stone 在代理自动配置功能中发现一个信息泄漏问题。

- CVE-2016-5135 ShenYeYinJiu 发现一种可绕过内容安全策略的方法。

- CVE-2016-5136 Rob Wu 发现一个释放后使用问题。

- CVE-2016-5137 Xiaoyin Liu 发现一种可了解是否曾经有用户访问 HSTS 网站的方法。

Chromium 已更新至 52.0.2743.82 版，可修正下列安全性問題 (boo#989901)：

- CVE-2016-1706：PPAPI 中的沙箱逸出

- CVE-2016-1707：iOS 上的 URL 偽造

- CVE-2016-1708：延伸模組中的釋放後使用

- CVE-2016-1709：sfntly 中的堆積緩衝區溢位

- CVE-2016-1710：Blink 中的同源繞過

- CVE-2016-1711：Blink 中的同源繞過

- CVE-2016-5127：Blink 中有一個釋放後使用問題

- CVE-2016-5128：V8 中的同源繞過

- CVE-2016-5129：V8 中的記憶體損毀

- CVE-2016-5130：URL 偽造

- CVE-2016-5131：libxml 中的釋放後使用

- CVE-2016-5132：ServiceWorker 中的限制同源繞過

- CVE-2016-5133：代理伺服器驗證中的來源混淆

- CVE-2016-5134：透過 PAC 指令碼造成 URL 洩漏

- CVE-2016-5135：內容安全性原則繞過

- CVE-2016-5136：延伸模組中的釋放後使用

- CVE-2016-5137：HSTS 和 CSP 的歷程記錄探查

- CVE-2016-1705：多個來自內部稽核、模糊測試和其他計劃的修正

Chromium 已更新到 52.0.2743.82，修复了以下安全问题 (boo#989901)：

- CVE-2016-1706：PPAPI 中的沙盒逃逸

- CVE-2016-1707：iOS 上的 URL 欺骗

- CVE-2016-1708：扩展中的释放后使用

- CVE-2016-1709：sfntly 中的堆缓冲区溢出

- CVE-2016-1710：Blink 中的同源绕过

- CVE-2016-1711：Blink 中的同源绕过

- CVE-2016-5127：Blink 中的释放后使用

- CVE-2016-5128：V8 中的同源绕过

- CVE-2016-5129：V8 中的内存损坏

- CVE-2016-5130：URL 欺骗

- CVE-2016-5131：libxml 中的释放后使用

- CVE-2016-5132：Service Worker 中受限的同源绕过

- CVE-2016-5133：代理认证中的来源混淆

- CVE-2016-5134：通过 PAC 脚本造成 URL 泄漏

- CVE-2016-5135：Content-Security-Policy 绕过

- CVE-2016-5136：扩展中的释放后使用

- CVE-2016-5137：HSTS 和 CSP 的历史记录嗅探

- CVE-2016-1705：通过内部审核、模糊测试和其他计划获得的各种补丁

The specific version of Chrome that the system is running is reportedly affected by the following vulnerabilities:

- Google Chrome contains a flaw in PPAPI that is triggered when handling certain messages not sent by the browser in the plugin broker process. This may allow a context-dependent attacker to bypass the sandbox. (CVE-2016-1706)

- Google Chrome for iOS contains a flaw in web/web_state/ui/crw_web_controller.mm that is triggered when handling invalid URLs. This may allow a context-dependent attacker to conduct URL spoofing attacks. (CVE-2016-1707)

- Google Chrome contains a use-after-free error related to extensions that may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 (CVE-2016-1708)

- Google sfntly contains an array indexing error in the ByteArray::Get() function in data/byte_array.cc that is triggered as user-supplied input is not properly validated. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially allowing the execution of arbitrary code. (CVE-2016-1709)

- Google Chrome contains a flaw in web/ChromeClientImpl.cpp that is triggered when handling creation of new windows by deferred frames. This may allow a context-dependent attacker to bypass the same-origin policy. (CVE-2016-1710)

- Google Chrome contains a flaw in core/loader/FrameLoader.cpp that is triggered when handling frame navigations during DocumentLoader detach. This may allow a context-dependent attacker to bypass the same-origin policy. (CVE-2016-1711)

- Google Chrome contains a use-after-free error in the previousLinePosition() function in core/editing/VisibleUnits.cpp. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (CVE-2016-5127)

- Google V8 contains an unspecified flaw which may allow a context-dependent attacker to bypass the same-origin policy. No further details have been provided by the vendor. (CVE-2016-5128)

- Google V8 contains a flaw that is triggered as user-supplied input is not properly validated. This may allow a context-dependent attacker to corrupt memory and cause a denial of service in a process linked against the library or potentially execute arbitrary code. (CVE-2016-5129)

- Google Chrome contains a flaw in the HistoryController::UpdateForCommit() function in content/renderer/history_controller.cc. The issue is triggered when handling two forward navigations that compete in different frames. This may allow a context-dependent attacker to perform URL spoofing attacks. (CVE-2016-5130)

- Libxml2 contains a use-after-free error in the xmlXPtrRangeToFunction() function in xpointer.c. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (CVE-2016-5131)

- Google Chrome contains a flaw related to Service Workers that is triggered when handling subframes of an insecure context. This may allow a context-dependent attacker to perform a limited bypass of the same-origin policy. (CVE-2016-5132)

- Google Chrome contains a flaw related to proxy authentication that is triggere when handling origins. This may allow a context-dependent attacker to spoof the proxy server origin. (CVE-2016-5133)

- Google Chrome contains a flaw that is triggered as https:// URLs are not properly sanitized before being sent to PAC scripts. This may allow a context-dependent attacker to leak URLs. (CVE-2016-5134)

- Google Chrome contains a flaw in html/parser/HTMLPreloadScanner.cpp related to the handling of referrer policies. This may allow a context-dependent attacker to bypass the content security policy (CSP). (CVE-2016-5135)

- Google Chrome contains a use-after-free error in extensions/renderer/user_script_injector.cc that is triggered when handling UserScript pointers. This may allow a malicious extension to dereference already freed memory and potentially execute arbitrary code with elevated privileges. (CVE-2016-5136)

- Google Chrome contains a flaw in the CSPSource::portMatches() function in frame/csp/CSPSource.cpp related to HSTS and CSP when handling HTTP vs HTTPS ports in source expressions. This may allow a context-dependent attacker to disclose browsing history information. (CVE-2016-5137)

- Google Chrome contains a flaw in the LayoutBox::removeFloatingOrPositionedChildFromBlockLists() function in core/layout/LayoutBox.cpp that is triggered when handling LayoutView floats. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1705)

- Google Chrome contains a flaw in the Resource::canUseCacheValidator() function in core/fetch/Resource.cpp that is triggered when revalidating Resource with redirects. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- Google Chrome contains a flaw in the Resource::willFollowRedirect() function in core/fetch/Resource.cpp that is triggered when handling redirect responses while revalidating resources. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- Google Chrome contains a flaw in net/url_request/sdch_dictionary_fetcher.cc that is triggered when handling dictionary requests failing after receiving data. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- Google Chrome contains a flaw in the ShapeResultSpacing::computeSpacing() function in platform/fonts/shaping/ShapeResultSpacing.cpp that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1705)

- Google Chrome contains a flaw in the Channel::Message::Deserialize() function in mojo/edk/system/channel.cc that is triggered when handling header sizes in channel messages. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2016-1705)

- Google Chrome contains an unspecified flaw in Font::individualCharacterRanges() function in platform/fonts/Font.cpp, which may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- Google WebRTC contains an out-of-bounds read flaw in the WebRtcIsacfix_PitchFilter() and WebRtcIsacfix_PitchFilterGains() functions in modules/audio_coding/codecs/isac/fix/source/pitch_filter.c that may allow a context-dependent attacker to crash a process linked against the library or potentially disclose memory contents. (CVE-2016-1705)

- Google Chrome contains a flaw in org/chromium/chrome/browser/toolbar/CustomTabToolbarAnimationDelegate.java that is due to the program failing to properly load security icons on custom HTTP connection tabs. This may allow a context-dependent attacker to spoof valid icons. (CVE-2016-1705)

- Google Skia contains an integer overflow condition in the SkLinearGradient::LinearGradientContext::shade4_dx_clamp() function in effects/gradients/SkLinearGradient.cpp . The issue is triggered as user-supplied input is not properly validated. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- libvpx contains an invalid read flaw in the setup_frame_size_with_refs() function in vp9/decoder/vp9_decodeframe.c that may allow a context-dependent attacker to crash a process linked against the library or potentially disclose memory contents.

- Google Chrome contains an unspecified flaw in extensions that is triggered during the handling of NativeMessaging IDs. This may allow a context-dependent attacker to have an unspecified impact. (CVE-2016-1705)

- Google Chrome contains an out-of-bounds read flaw in the HTMLMenuItemElement::defaultEventHandler() function in core/html/HTMLMenuItemElement.cpp that may allow a context-dependent attacker to potentially disclose memory contents. (CVE-2016-1705)

- Google Chrome contains an unspecified flaw in the GURL::ReplaceComponents() function in url/gurl.cc that is triggered during inner URL creation. This may allow a context-dependent attacker to have an unspecified impact. No further details have been provided. (CVE-2016-1705)

- Google V8 contains an unspecified flaw that may allow a context-dependent attacker to have an unspecified impact. No further details have been provided by the vendor. (CVE-2016-1705)

ID	名稱	產品	系列	已發布	已更新	嚴重性
92666	Debian DSA-3637-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	2016/8/2	2021/1/11	critical
92551	openSUSE Security Update : Chromium (openSUSE-2016-901)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92666	Debian DSA-3637-1：chromium ブラウザ - セキュリティ更新	Nessus	Debian Local Security Checks	2016/8/2	2021/1/11	critical
92551	openSUSE セキュリティ更新：Chromium（openSUSE-2016-901）	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92666	Debian DSA-3637-1：chromium-browser - 安全性更新	Nessus	Debian Local Security Checks	2016/8/2	2021/1/11	critical
92666	Debian DSA-3637-1：chromium 浏览器 - 安全更新	Nessus	Debian Local Security Checks	2016/8/2	2021/1/11	critical
92551	openSUSE 安全性更新：Chromium (openSUSE-2016-901)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92551	openSUSE 安全更新：Chromium (openSUSE-2016-901)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92550	openSUSE Security Update : Chromium (openSUSE-2016-900)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92655	openSUSE Security Update : Chromium (openSUSE-2016-919)	Nessus	SuSE Local Security Checks	2016/8/1	2021/1/19	critical
92550	openSUSE セキュリティ更新：Chromium（openSUSE-2016-900）	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92655	openSUSE セキュリティ更新：Chromium（openSUSE-2016-919）	Nessus	SuSE Local Security Checks	2016/8/1	2021/1/19	critical
92550	openSUSE 安全性更新：Chromium (openSUSE-2016-900)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92655	openSUSE 安全性更新：Chromium (openSUSE-2016-919)	Nessus	SuSE Local Security Checks	2016/8/1	2021/1/19	critical
92550	openSUSE 安全更新：Chromium (openSUSE-2016-900)	Nessus	SuSE Local Security Checks	2016/7/26	2021/1/19	critical
92655	openSUSE 安全更新：Chromium (openSUSE-2016-919)	Nessus	SuSE Local Security Checks	2016/8/1	2021/1/19	critical
802027	Chrome < 52.0.2743.82 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2016/9/6		high

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high