Google Chrome same-Source Policy Bypass Vulnerability (CVE-2016-1711)
Google Chrome same-Source Policy Bypass Vulnerability (CVE-2016-1711)
Release date:
Updated on:
Affected Systems:
Google Chrome <52.0.2743.82
Description:
CVE (CAN) ID: CVE-2016-1711
Google Chrome is a Web browser tool developed by Google.
Google Chrome <52.0.2743.82, Blink/WebKit/Source/core/loader/FrameLoader. cpp does not disable the framework navigation in the DocumentLoader object separation operation. Remote attackers can bypass the same-Source policy by constructing a website.
<* Source: Google
*>
Suggestion:
Vendor patch:
Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Https://crbug.com/617495
Https://codereview.chromium.org/1913983002
Http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html
This article permanently updates the link address: