QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-5145

Back to search

CVE-2016-5145

Published: Aug 7, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

VendorProductVersions

n/a

n/a

affected
n/a

References

https://crbug.com/623406
x_refsource_CONFIRM
92276
vdb-entry
x_refsource_BID
openSUSE-SU-2016:1983
vendor-advisory
x_refsource_SUSE
RHSA-2016:1580
vendor-advisory
x_refsource_REDHAT
1036547
vdb-entry
x_refsource_SECTRACK
GLSA-201610-09
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1982
vendor-advisory
x_refsource_SUSE
FEDORA-2016-e9798eaaa3
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2016-5145 - Security Vulnerability | QwikSec