CVE ID:	CVE-2016-1622
Description:	The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
Test IDs:	1.3.6.1.4.1.25623.1.0.703486
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1622 BugTraq ID: 83125 http://www.securityfocus.com/bid/83125 Debian Security Information: DSA-3486 (Google Search) http://www.debian.org/security/2016/dsa-3486 https://security.gentoo.org/glsa/201603-09 RedHat Security Advisories: RHSA-2016:0241 http://rhn.redhat.com/errata/RHSA-2016-0241.html http://www.securitytracker.com/id/1035183 SuSE Security Announcement: openSUSE-SU-2016:0491 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00104.html SuSE Security Announcement: openSUSE-SU-2016:0518 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00119.html