Lucene search

K
archlinuxArch LinuxASA-201509-1
HistorySep 02, 2015 - 12:00 a.m.

chromium: multiple issues

2015-09-0200:00:00
Arch Linux
lists.archlinux.org
27

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

87.0%

  • CVE-2015-1291, CVE-2015-1293:

Cross-origin bypass in DOM.

  • CVE-2015-1292:

Cross-origin bypass in ServiceWorker.

  • CVE-2015-1294:

Use-after-free in Skia.

  • CVE-2015-1295:

Use-after-free in Printing.

  • CVE-2015-1296:

Character spoofing in omnibox.

  • CVE-2015-1297:

Permission scoping error in WebRequest.

  • CVE-2015-1298:

URL validation error in extensions.

  • CVE-2015-1299:

Use-after-free in Blink.

  • CVE-2015-1300:

Information leak in Blink.

  • CVE-2015-1301:

Various fixes from internal audits, fuzzing and other initiatives.

OSVersionArchitecturePackageVersionFilename
anyanyanychromium< 45.0.2454.85-1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

87.0%