Improper Input Validation Affecting chromium-browser package, versions <55.0.2883.75-1~deb8u1
Threat Intelligence
EPSS
0.97% (61st percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-DEBIAN8-CHROMIUMBROWSER-408082
- published18 Dec 2016
- disclosed18 Dec 2016
Introduced: 18 Dec 2016
CVE-2016-5188 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade Debian:8 chromium-browser to version 55.0.2883.75-1~deb8u1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream chromium-browser package and not the chromium-browser package as distributed by Debian.
See How to fix? for Debian:8 relevant fixed versions and status.
Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.
References
- https://crbug.com/565760
- https://security-tracker.debian.org/tracker/CVE-2016-5188
- https://security.gentoo.org/glsa/201610-09
- https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
- http://rhn.redhat.com/errata/RHSA-2016-2067.html
- http://www.securityfocus.com/bid/93528
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-5188