CVE-2016-8508

{"id": "CVE-2016-8508", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2017-03-01T15:59:00.353", "references": [{"url": "http://www.securityfocus.com/bid/96514", "tags": ["Third Party Advisory", "VDB Entry"], "source": "browser-security@yandex-team.ru"}, {"url": "https://yandex.com/blog/security-changelogs/fixed-in-version-17-1", "tags": ["Vendor Advisory"], "source": "browser-security@yandex-team.ru"}, {"url": "http://www.securityfocus.com/bid/96514", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://yandex.com/blog/security-changelogs/fixed-in-version-17-1", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-254"}]}], "descriptions": [{"lang": "en", "value": "Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site."}, {"lang": "es", "value": "Yandex Browser para escritorio en versiones anteriores a 17.1.1.227 no muestra las advertencias de Protect (similar a Safebrowsing en Chromium) en sitios web con un tipo de contenido especial, lo que podr\u00eda ser usado por atacantes remotos para prevenir la advertencia Protect en su propio sitio web malicioso."}], "lastModified": "2025-04-20T01:37:25.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:yandex:yandex_browser:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E04D5E5-9981-434D-9153-193C68643C97", "versionEndExcluding": "17.1.1.227"}], "operator": "OR"}]}], "sourceIdentifier": "browser-security@yandex-team.ru"}