Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1266HistoryJun 26, 2015 - 2:59 p.m.
CVE-2015-1266
2015-06-2614:59:00
Debian Security Bug Tracker
security-tracker.debian.org
9
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | chromium-browser | < 70.0.3538.110-1~deb9u1 | chromium-browser_70.0.3538.110-1~deb9u1_all.deb |
Related
prion
prion
Design/Logic Flaw
2015-06-26 14:59:00
cve
cve
CVE-2015-1266
2015-06-26 14:59:00
ubuntucve
ubuntucve
CVE-2015-1266
2015-06-26 00:00:00
threatpost
threatpost
Google Fixes Handful of Bugs in Chrome
2015-06-22 12:05:47
nessus
nessus
FreeBSD : www/chromium -- multiple vulnerabilities (d46ed7b8-1912-11e5-9fdf-00262d5ed8ee)
2015-06-23 00:00:00
Google Chrome < 43.0.2357.130 Multiple Vulnerabilities
2015-06-23 00:00:00
openSUSE Security Update : chromium (openSUSE-2015-449)
2015-06-26 00:00:00
kaspersky
kaspersky
KLA10617 Bypass security restrictions vulnerabilities in Google Chrome
2015-06-22 00:00:00
freebsd
freebsd
www/chromium -- multiple vulnerabilities
2015-06-22 00:00:00
mageia
mageia
Updated chromium-browser package fixes security vulnerability
2015-07-05 20:22:03
ubuntu
ubuntu
Oxide vulnerabilities
2015-06-30 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2015-07-10 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities-01 (Jun 2015) - Windows
2015-06-29 00:00:00
Mageia: Security Advisory (MGASA-2015-0265)
2015-10-15 00:00:00
Ubuntu: Security Advisory (USN-2652-1)
2015-07-01 00:00:00
redhat
redhat
(RHSA-2015:1188) Important: chromium-browser security update
2015-06-25 00:00:00
chrome
chrome
Chrome Stable Update
2015-06-22 00:00:00
securityvulns
securityvulns
Google Chrome / Chromium multiple security vulnerabilities
2015-07-26 00:00:00
[SECURITY] [DSA 3315-1] chromium-browser security update
2015-07-26 00:00:00
osv
osv
chromium-browser - security update
2015-07-23 00:00:00
debian
debian
[SECURITY] [DSA 3315-1] chromium-browser security update
2015-07-24 12:29:48
[SECURITY] [DSA 3315-1] chromium-browser security update
2015-07-24 12:29:48
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
Related for DEBIANCVE:CVE-2015-1266