ALT Linux Team

Package v8-chromium update in sisyphus on 2015-09-29

ALT-PU-2015-1814-1

Package v8-chromium updated to version 4.5.103.35-alt1 for branch sisyphus in task 150519.

Closed vulnerabilities

Published: 2015-10-29
Modified: 2021-03-23

BDU:2015-11683

Уязвимость браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
Published: 2015-10-12
Modified: 2025-04-12

CVE-2015-1304

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top