CVE-2016-5173 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-5173 Interim 1 35 2025-11-05T04:25:19Z current 2021-05-30T13:43:04Z 2025-11-05T04:25:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-5173 The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VU5JLFTK7OMH3L6COLWYBQWQJS4YB3QH/#VU5JLFTK7OMH3L6COLWYBQWQJS4YB3QH E-Mail link for openSUSE-SU-2016:2309-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3GEXFADUKP2HFADWK22XFFM5RDJAXDCS/#3GEXFADUKP2HFADWK22XFFM5RDJAXDCS E-Mail link for openSUSE-SU-2016:2310-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4KCI3TOYLRFN25IQWARL7AL34MYPNDOI/#4KCI3TOYLRFN25IQWARL7AL34MYPNDOI E-Mail link for openSUSE-SU-2016:2311-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Package Hub 12 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed chromedriver-53.0.2785.113-100.1 chromedriver-55.0.2883.75-3.1 chromium-101.0.4951.64-bp154.1.2 chromium-53.0.2785.113-100.1 chromium-55.0.2883.75-3.1 chromium-66.0.3359.170-lp150.1.1 chromium-83.0.4103.97-lp152.1.1 chromium-90.0.4430.212-bp153.1.1 chromium-desktop-gnome-53.0.2785.113-100.1 chromium-desktop-kde-53.0.2785.113-100.1 chromium-ffmpegsumo-53.0.2785.113-100.1 nodejs10 nodejs10-devel nodejs10-docs nodejs8 nodejs8-devel nodejs8-docs npm10 npm8 ungoogled-chromium-113.0.5672.92-1.1 ungoogled-chromium-chromedriver-113.0.5672.92-1.1 chromedriver-53.0.2785.113-100.1 as a component of SUSE Package Hub 12 chromium-53.0.2785.113-100.1 as a component of SUSE Package Hub 12 chromium-desktop-gnome-53.0.2785.113-100.1 as a component of SUSE Package Hub 12 chromium-desktop-kde-53.0.2785.113-100.1 as a component of SUSE Package Hub 12 chromium-ffmpegsumo-53.0.2785.113-100.1 as a component of SUSE Package Hub 12 chromium-66.0.3359.170-lp150.1.1 as a component of openSUSE Leap 15.0 chromium-83.0.4103.97-lp152.1.1 as a component of openSUSE Leap 15.2 chromium-90.0.4430.212-bp153.1.1 as a component of openSUSE Leap 15.3 chromium-101.0.4951.64-bp154.1.2 as a component of openSUSE Leap 15.4 chromedriver-55.0.2883.75-3.1 as a component of openSUSE Tumbleweed chromium-55.0.2883.75-3.1 as a component of openSUSE Tumbleweed ungoogled-chromium-113.0.5672.92-1.1 as a component of openSUSE Tumbleweed ungoogled-chromium-chromedriver-113.0.5672.92-1.1 as a component of openSUSE Tumbleweed nodejs10 as a component of SUSE CaaS Platform 4.0 nodejs10-devel as a component of SUSE CaaS Platform 4.0 nodejs10-docs as a component of SUSE CaaS Platform 4.0 npm10 as a component of SUSE CaaS Platform 4.0 nodejs8 as a component of SUSE CaaS Platform 4.0 nodejs8-devel as a component of SUSE CaaS Platform 4.0 nodejs8-docs as a component of SUSE CaaS Platform 4.0 npm8 as a component of SUSE CaaS Platform 4.0 nodejs10 as a component of SUSE Enterprise Storage 6 nodejs8 as a component of SUSE Enterprise Storage 6 nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS nodejs10 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 nodejs10-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 nodejs10-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 npm10 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 nodejs10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15-ESPOS nodejs8 as a component of SUSE Linux Enterprise Server 15-ESPOS nodejs10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 nodejs8 as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10 as a component of SUSE Manager Proxy 4.0 nodejs8 as a component of SUSE Manager Proxy 4.0 nodejs10 as a component of SUSE Manager Retail Branch Server 4.0 nodejs8 as a component of SUSE Manager Retail Branch Server 4.0 nodejs10 as a component of SUSE Manager Server 4.0 nodejs8 as a component of SUSE Manager Server 4.0 The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack. CVE-2016-5173 SUSE Package Hub 12:chromedriver-53.0.2785.113-100.1 SUSE Package Hub 12:chromium-53.0.2785.113-100.1 SUSE Package Hub 12:chromium-desktop-gnome-53.0.2785.113-100.1 SUSE Package Hub 12:chromium-desktop-kde-53.0.2785.113-100.1 SUSE Package Hub 12:chromium-ffmpegsumo-53.0.2785.113-100.1 openSUSE Leap 15.0:chromium-66.0.3359.170-lp150.1.1 openSUSE Leap 15.2:chromium-83.0.4103.97-lp152.1.1 openSUSE Leap 15.3:chromium-90.0.4430.212-bp153.1.1 openSUSE Leap 15.4:chromium-101.0.4951.64-bp154.1.2 openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1 openSUSE Tumbleweed:chromium-55.0.2883.75-3.1 openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1 openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1 SUSE CaaS Platform 4.0:nodejs10 SUSE CaaS Platform 4.0:nodejs10-devel SUSE CaaS Platform 4.0:nodejs10-docs SUSE CaaS Platform 4.0:nodejs8 SUSE CaaS Platform 4.0:nodejs8-devel SUSE CaaS Platform 4.0:nodejs8-docs SUSE CaaS Platform 4.0:npm10 SUSE CaaS Platform 4.0:npm8 SUSE Enterprise Storage 6:nodejs10 SUSE Enterprise Storage 6:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15-LTSS:npm8 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs10 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs10-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP2:nodejs10-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP2:npm10 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15 SP1-LTSS:npm10 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8 SUSE Linux Enterprise Server 15-ESPOS:nodejs10 SUSE Linux Enterprise Server 15-ESPOS:nodejs8 SUSE Linux Enterprise Server 15-LTSS:nodejs10 SUSE Linux Enterprise Server 15-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15-LTSS:nodejs8 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15-LTSS:npm10 SUSE Linux Enterprise Server 15-LTSS:npm8 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:nodejs10 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8 SUSE Linux Enterprise Server for SAP Applications 15:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15:npm10 SUSE Linux Enterprise Server for SAP Applications 15:npm8 SUSE Manager Proxy 4.0:nodejs10 SUSE Manager Proxy 4.0:nodejs8 SUSE Manager Retail Branch Server 4.0:nodejs10 SUSE Manager Retail Branch Server 4.0:nodejs8 SUSE Manager Server 4.0:nodejs10 SUSE Manager Server 4.0:nodejs8 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L