Oval Definition:oval:org.cisecurity:def:996
Revision Date:2016-09-16Version:28
Title:URL leakage via PAC script - CVE-2016-5134
Description:net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-5134
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Google Chrome
Definition Synopsis
  • Google Chrome is installed
  • AND Check if Google Chrome version is less than 52.0.2743.82
    • BACK