Revision Date: | 2017-01-19 | Version: | 1 | Title: | CVE-2016-5196 on Ubuntu 16.04 LTS (xenial) - medium. | Description: | The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.
| Family: | unix | Class: | vulnerability | Status: | | Reference(s): | CVE-2016-5196
| Platform(s): | Ubuntu 16.04 LTS
| Product(s): | | Definition Synopsis | Ubuntu 16.04 LTS (xenial) is installed. AND Package Information
NOT chromium-browser package in xenial, while related to the CVE in some way, is not affected (note: 'android only').
OR NOT chromium-browser-l10n package in xenial, while related to the CVE in some way, is not affected (note: 'android only').
OR NOT chromium-chromedriver package in xenial, while related to the CVE in some way, is not affected (note: 'android only').
OR NOT chromium-codecs-ffmpeg package in xenial, while related to the CVE in some way, is not affected (note: 'android only').
OR NOT chromium-codecs-ffmpeg-extra package in xenial, while related to the CVE in some way, is not affected (note: 'android only').
|
|