Vulnerability CVE-2016-1615: Information

Description

The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-1615
Published: Jan. 25, 2016
Modified: Nov. 7, 2023
Error type identifier: CWE-254

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus47.0.2526.111-alt1125.0.6422.141-alt1ALT-PU-2016-1029-1155937Fixed
chromiump1047.0.2526.111-alt1119.0.6045.159-alt0.p10.1ALT-PU-2016-1029-1155937Fixed
chromiump947.0.2526.111-alt197.0.4692.99-alt0.p9.1ALT-PU-2016-1029-1155937Fixed
chromiumc10f147.0.2526.111-alt1110.0.5481.177-alt1.p10.1ALT-PU-2016-1029-1155937Fixed
chromiumc9f247.0.2526.111-alt184.0.4147.105-alt1.1.p9ALT-PU-2016-1029-1155937Fixed
chromiump1147.0.2526.111-alt1125.0.6422.141-alt1ALT-PU-2016-1029-1155937Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
81430
    RHSA-2016:0072
      http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
        1034801
          openSUSE-SU-2016:0249
            https://code.google.com/p/chromium/issues/detail?id=468179
              GLSA-201603-09
                openSUSE-SU-2016:0271
                  DSA-3456
                    openSUSE-SU-2016:0250

                        1. Configuration 1

                          cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
                          End including
                          47.0.2526.106
                      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                      Version: v24.5.3
                      Back to top