MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю обойти правила ограничения домена
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
Серьёзность:
Закрытые проблемы (72)
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю получить доступ к значениям образцов аудио
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PСсылки
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю выполнить действия, непредусмотренные интерфейсом браузера
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю получить доступ к защищаемой информации
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NСсылки
MEDIUM6.8
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю вызвать отказ в обслуживании
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая удаленному нарушителю получить доступ к локальным файлам
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NСсылки
MEDIUM4.3
Уязвимость интерфейса File System API браузера Google Chrome, позволяющая удаленному нарушителю обойти защитный механизм SafeBrowsing
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
HIGH7.5
Уязвимости браузера Google Chrome, позволяющие удаленному нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PHIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PMEDIUM6.8
Уязвимость браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти механизм песочницы или вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю внедрить команды в выполняемый сценарий
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти правила разграничения доступа
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
MEDIUM6.8
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая нарушителю подменить данные
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
HIGH7.5
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая нарушителю подменить данные
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти ограничения доступа
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти ограничения доступа
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти ограничения доступа
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
MEDIUM5.0
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти ограничения доступа
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
HIGH7.3
Уязвимость функции CertificateResourceHandler, обрабатывающей MIME сертификаты, браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 3.xВЫСОКАЯ 7.3
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LCVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
MEDIUM5.0
The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/USN-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=456518
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=190980&view=revision
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/USN-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=456518
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=190980&view=revision
MEDIUM4.3
The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=313939
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=189527&view=revision
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=313939
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=189527&view=revision
HIGH7.5
Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=461191
- https://codereview.chromium.org/1007123003
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=461191
- https://codereview.chromium.org/1007123003
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=445808
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=445808
- https://security.gentoo.org/glsa/201506-04
MEDIUM5.0
gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=463599
- https://codereview.chromium.org/978193003
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=463599
- https://codereview.chromium.org/978193003
- https://security.gentoo.org/glsa/201506-04
MEDIUM4.3
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=418402
- https://codereview.chromium.org/628763003
- https://codereview.chromium.org/660663002
- https://codereview.chromium.org/717573004
- https://codereview.chromium.org/868123002
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=418402
- https://codereview.chromium.org/628763003
- https://codereview.chromium.org/660663002
- https://codereview.chromium.org/717573004
- https://codereview.chromium.org/868123002
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=460917
- https://codereview.chromium.org/1000893003
- https://codereview.chromium.org/1019033004
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=460917
- https://codereview.chromium.org/1000893003
- https://codereview.chromium.org/1019033004
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0921.html
- http://www.debian.org/security/2015/dsa-3242
- http://www.securityfocus.com/bid/74389
- http://www.securitytracker.com/id/1032234
- http://www.ubuntu.com/usn/USN-2582-1
- https://code.google.com/p/chromium/issues/detail?id=453279
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=192655&view=revision
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0921.html
- http://www.debian.org/security/2015/dsa-3242
- http://www.securityfocus.com/bid/74389
- http://www.securitytracker.com/id/1032234
- http://www.ubuntu.com/usn/USN-2582-1
- https://code.google.com/p/chromium/issues/detail?id=453279
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=192655&view=revision
MEDIUM5.0
The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://chromium.googlesource.com/chromium/src/net/+/2359906c4fdfa9d44b045755d23fe5327c10e010
- https://code.google.com/p/chromium/issues/detail?id=455215
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://chromium.googlesource.com/chromium/src/net/+/2359906c4fdfa9d44b045755d23fe5327c10e010
- https://code.google.com/p/chromium/issues/detail?id=455215
- https://security.gentoo.org/glsa/201506-04
MEDIUM6.8
Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=444957
- https://codereview.chromium.org/831283002
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=444957
- https://codereview.chromium.org/831283002
- https://security.gentoo.org/glsa/201506-04
MEDIUM5.0
Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=437399
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=437399
- https://security.gentoo.org/glsa/201506-04
MEDIUM5.0
The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=429838
- https://codereview.chromium.org/917313004
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=429838
- https://codereview.chromium.org/917313004
- https://security.gentoo.org/glsa/201506-04
MEDIUM4.3
The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=380663
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=380663
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=389595
- https://code.google.com/p/chromium/issues/detail?id=400339
- https://code.google.com/p/chromium/issues/detail?id=403665
- https://code.google.com/p/chromium/issues/detail?id=424957
- https://code.google.com/p/chromium/issues/detail?id=430533
- https://code.google.com/p/chromium/issues/detail?id=436564
- https://code.google.com/p/chromium/issues/detail?id=439992
- https://code.google.com/p/chromium/issues/detail?id=442670
- https://code.google.com/p/chromium/issues/detail?id=444198
- https://code.google.com/p/chromium/issues/detail?id=445305
- https://code.google.com/p/chromium/issues/detail?id=447889
- https://code.google.com/p/chromium/issues/detail?id=448299
- https://code.google.com/p/chromium/issues/detail?id=451058
- https://code.google.com/p/chromium/issues/detail?id=451059
- https://code.google.com/p/chromium/issues/detail?id=452794
- https://code.google.com/p/chromium/issues/detail?id=456636
- https://code.google.com/p/chromium/issues/detail?id=458776
- https://code.google.com/p/chromium/issues/detail?id=458870
- https://code.google.com/p/chromium/issues/detail?id=460939
- https://code.google.com/p/chromium/issues/detail?id=462319
- https://code.google.com/p/chromium/issues/detail?id=464594
- https://code.google.com/p/chromium/issues/detail?id=465586
- https://code.google.com/p/chromium/issues/detail?id=469082
- https://code.google.com/p/chromium/issues/detail?id=469756
- https://code.google.com/p/chromium/issues/detail?id=474254
- https://code.google.com/p/chromium/issues/detail?id=476786
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securitytracker.com/id/1032209
- https://code.google.com/p/chromium/issues/detail?id=389595
- https://code.google.com/p/chromium/issues/detail?id=400339
- https://code.google.com/p/chromium/issues/detail?id=403665
- https://code.google.com/p/chromium/issues/detail?id=424957
- https://code.google.com/p/chromium/issues/detail?id=430533
- https://code.google.com/p/chromium/issues/detail?id=436564
- https://code.google.com/p/chromium/issues/detail?id=439992
- https://code.google.com/p/chromium/issues/detail?id=442670
- https://code.google.com/p/chromium/issues/detail?id=444198
- https://code.google.com/p/chromium/issues/detail?id=445305
- https://code.google.com/p/chromium/issues/detail?id=447889
- https://code.google.com/p/chromium/issues/detail?id=448299
- https://code.google.com/p/chromium/issues/detail?id=451058
- https://code.google.com/p/chromium/issues/detail?id=451059
- https://code.google.com/p/chromium/issues/detail?id=452794
- https://code.google.com/p/chromium/issues/detail?id=456636
- https://code.google.com/p/chromium/issues/detail?id=458776
- https://code.google.com/p/chromium/issues/detail?id=458870
- https://code.google.com/p/chromium/issues/detail?id=460939
- https://code.google.com/p/chromium/issues/detail?id=462319
- https://code.google.com/p/chromium/issues/detail?id=464594
- https://code.google.com/p/chromium/issues/detail?id=465586
- https://code.google.com/p/chromium/issues/detail?id=469082
- https://code.google.com/p/chromium/issues/detail?id=469756
- https://code.google.com/p/chromium/issues/detail?id=474254
- https://code.google.com/p/chromium/issues/detail?id=476786
HIGH7.5
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0921.html
- http://www.debian.org/security/2015/dsa-3242
- http://www.securityfocus.com/bid/74389
- http://www.securitytracker.com/id/1032234
- http://www.ubuntu.com/usn/USN-2582-1
- https://code.google.com/p/chromium/issues/detail?id=453553
- https://code.google.com/p/chromium/issues/detail?id=458191
- https://code.google.com/p/chromium/issues/detail?id=473688
- https://code.google.com/p/chromium/issues/detail?id=475749
- https://code.google.com/p/chromium/issues/detail?id=481777
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0921.html
- http://www.debian.org/security/2015/dsa-3242
- http://www.securityfocus.com/bid/74389
- http://www.securitytracker.com/id/1032234
- http://www.ubuntu.com/usn/USN-2582-1
- https://code.google.com/p/chromium/issues/detail?id=453553
- https://code.google.com/p/chromium/issues/detail?id=458191
- https://code.google.com/p/chromium/issues/detail?id=473688
- https://code.google.com/p/chromium/issues/detail?id=475749
- https://code.google.com/p/chromium/issues/detail?id=481777
- https://security.gentoo.org/glsa/201506-04
MEDIUM6.8
Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
- http://blog.skylined.nl/20161123001.html
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://seclists.org/fulldisclosure/2016/Nov/136
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/archive/1/539824/100/0/threaded
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- http://zerodayinitiative.com/advisories/ZDI-15-236/
- https://code.google.com/p/chromium/issues/detail?id=481015
- https://security.gentoo.org/glsa/201506-04
- http://blog.skylined.nl/20161123001.html
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://seclists.org/fulldisclosure/2016/Nov/136
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/archive/1/539824/100/0/threaded
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- http://zerodayinitiative.com/advisories/ZDI-15-236/
- https://code.google.com/p/chromium/issues/detail?id=481015
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=474029
- https://codereview.chromium.org/1061053002
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=474029
- https://codereview.chromium.org/1061053002
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=464552
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=191807&view=revision
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=464552
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=191807&view=revision
MEDIUM5.0
core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=444927
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=192658&view=revision
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=444927
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=192658&view=revision
MEDIUM6.8
Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=473253
- https://codereview.chromium.org/1071063005
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=473253
- https://codereview.chromium.org/1071063005
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=478549
- https://codereview.chromium.org/1098913004
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=194421&view=revision
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=478549
- https://codereview.chromium.org/1098913004
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=194421&view=revision
HIGH7.5
platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=468519
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?view=rev&revision=193571
- https://src.chromium.org/viewvc/blink?view=rev&revision=193911
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=468519
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?view=rev&revision=193571
- https://src.chromium.org/viewvc/blink?view=rev&revision=193911
HIGH7.5
Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168803.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166975.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167428.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=450939
- https://codereview.chromium.org/1106303002
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168803.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166975.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167428.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=450939
- https://codereview.chromium.org/1106303002
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=468167
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=468167
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=474370
- https://codereview.chromium.org/1075833002
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=474370
- https://codereview.chromium.org/1075833002
- https://security.gentoo.org/glsa/201506-04
MEDIUM5.0
android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=466351
- https://codereview.chromium.org/1011383005
- https://codereview.chromium.org/1056743002
- https://codereview.chromium.org/1077483002
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=466351
- https://codereview.chromium.org/1011383005
- https://codereview.chromium.org/1056743002
- https://codereview.chromium.org/1077483002
HIGH7.5
platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=476647
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=194541&view=revision
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=476647
- https://security.gentoo.org/glsa/201506-04
- https://src.chromium.org/viewvc/blink?revision=194541&view=revision
MEDIUM4.3
The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=479162
- https://codereview.chromium.org/1056103005
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=479162
- https://codereview.chromium.org/1056103005
- https://security.gentoo.org/glsa/201506-04
MEDIUM4.3
Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=481015
- https://security.gentoo.org/glsa/201506-04
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=481015
- https://security.gentoo.org/glsa/201506-04
HIGH7.5
Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74727
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=413534
- https://code.google.com/p/chromium/issues/detail?id=445741
- https://code.google.com/p/chromium/issues/detail?id=448057
- https://code.google.com/p/chromium/issues/detail?id=454157
- https://code.google.com/p/chromium/issues/detail?id=458026
- https://code.google.com/p/chromium/issues/detail?id=464642
- https://code.google.com/p/chromium/issues/detail?id=464792
- https://code.google.com/p/chromium/issues/detail?id=465426
- https://code.google.com/p/chromium/issues/detail?id=467372
- https://code.google.com/p/chromium/issues/detail?id=467644
- https://code.google.com/p/chromium/issues/detail?id=474784
- https://code.google.com/p/chromium/issues/detail?id=475070
- https://code.google.com/p/chromium/issues/detail?id=476107
- https://code.google.com/p/chromium/issues/detail?id=484270
- https://code.google.com/p/chromium/issues/detail?id=485412
- https://code.google.com/p/chromium/issues/detail?id=485419
- https://code.google.com/p/chromium/issues/detail?id=489518
- https://security.gentoo.org/glsa/201506-04
- https://www.exploit-db.com/exploits/37766/
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74727
- http://www.securitytracker.com/id/1032375
- https://code.google.com/p/chromium/issues/detail?id=413534
- https://code.google.com/p/chromium/issues/detail?id=445741
- https://code.google.com/p/chromium/issues/detail?id=448057
- https://code.google.com/p/chromium/issues/detail?id=454157
- https://code.google.com/p/chromium/issues/detail?id=458026
- https://code.google.com/p/chromium/issues/detail?id=464642
- https://code.google.com/p/chromium/issues/detail?id=464792
- https://code.google.com/p/chromium/issues/detail?id=465426
- https://code.google.com/p/chromium/issues/detail?id=467372
- https://code.google.com/p/chromium/issues/detail?id=467644
- https://code.google.com/p/chromium/issues/detail?id=474784
- https://code.google.com/p/chromium/issues/detail?id=475070
- https://code.google.com/p/chromium/issues/detail?id=476107
- https://code.google.com/p/chromium/issues/detail?id=484270
- https://code.google.com/p/chromium/issues/detail?id=485412
- https://code.google.com/p/chromium/issues/detail?id=485419
- https://code.google.com/p/chromium/issues/detail?id=489518
- https://security.gentoo.org/glsa/201506-04
- https://www.exploit-db.com/exploits/37766/
MEDIUM5.0
content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75333
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=464922
- https://codereview.chromium.org/1129123004/
- https://security.gentoo.org/glsa/201507-18
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75333
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=464922
- https://codereview.chromium.org/1129123004/
- https://security.gentoo.org/glsa/201507-18
MEDIUM5.0
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75334
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=497507
- https://codereview.chromium.org/1174343003/
- https://security.gentoo.org/glsa/201507-18
- https://src.chromium.org/viewvc/blink?revision=196755&view=revision
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75334
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=497507
- https://codereview.chromium.org/1174343003/
- https://security.gentoo.org/glsa/201507-18
- https://src.chromium.org/viewvc/blink?revision=196755&view=revision
MEDIUM5.0
bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75332
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=494640
- https://security.gentoo.org/glsa/201507-18
- https://src.chromium.org/viewvc/blink?revision=196373&view=revision
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75332
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=494640
- https://security.gentoo.org/glsa/201507-18
- https://src.chromium.org/viewvc/blink?revision=196373&view=revision
MEDIUM4.3
The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75336
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=461481
- https://codereview.chromium.org/1149753002
- https://security.gentoo.org/glsa/201507-18
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2015-1188.html
- http://www.debian.org/security/2015/dsa-3315
- http://www.securityfocus.com/bid/75336
- http://www.securitytracker.com/id/1032731
- http://www.ubuntu.com/usn/USN-2652-1
- https://code.google.com/p/chromium/issues/detail?id=461481
- https://codereview.chromium.org/1149753002
- https://security.gentoo.org/glsa/201507-18
HIGH7.5
Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74221
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://ubuntu.com/usn/usn-2570-1
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74221
MEDIUM4.3
browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a device's physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74225
- https://code.google.com/p/chromium/issues/detail?id=433170
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74225
- https://code.google.com/p/chromium/issues/detail?id=433170
HIGH7.5
The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.
CVSS 2.0ВЫСОКАЯ 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.securityfocus.com/bid/72715
- https://code.google.com/p/chromium/issues/detail?id=455839
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.securityfocus.com/bid/72715
- https://code.google.com/p/chromium/issues/detail?id=455839
MEDIUM4.3
Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service (UI disruption) by constructing a crafted HTML document containing JavaScript code with requestFullScreen and requestPointerLock calls, and arranging for the user to access this document with a file: URL.
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:PСсылки
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74227
- https://code.google.com/p/chromium/issues/detail?id=455953
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://www.debian.org/security/2015/dsa-3238
- http://www.securityfocus.com/bid/74227
- https://code.google.com/p/chromium/issues/detail?id=455953