QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-5142

Back to search

CVE-2016-5142

Published: Aug 7, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.

VendorProductVersions

n/a

n/a

affected
n/a

References

92276
vdb-entry
x_refsource_BID
openSUSE-SU-2016:1983
vendor-advisory
x_refsource_SUSE
RHSA-2016:1580
vendor-advisory
x_refsource_REDHAT
1036547
vdb-entry
x_refsource_SECTRACK
https://crbug.com/626948
x_refsource_CONFIRM
GLSA-201610-09
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1982
vendor-advisory
x_refsource_SUSE
DSA-3645
vendor-advisory
x_refsource_DEBIAN
FEDORA-2016-e9798eaaa3
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now