Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1298HistorySep 03, 2015 - 10:59 p.m.
CVE-2015-1298
2015-09-0322:59:00
Debian Security Bug Tracker
security-tracker.debian.org
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | chromium-browser | < 70.0.3538.110-1~deb9u1 | chromium-browser_70.0.3538.110-1~deb9u1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2015-1298
2015-09-03 00:00:00
prion
prion
Design/Logic Flaw
2015-09-03 22:59:00
cve
cve
CVE-2015-1298
2015-09-03 22:59:00
threatpost
threatpost
Google Chrome 45 Security Patches, Bug Bounty Awards
2015-09-02 08:48:53
nessus
nessus
Debian DSA-3351-1 : chromium-browser - security update
2015-09-04 00:00:00
RHEL 6 : chromium-browser (RHSA-2015:1712)
2015-09-17 00:00:00
Google Chrome < 45.0.2454.85 Multiple Vulnerabilities (Mac OS X)
2015-09-02 00:00:00
chrome
chrome
Stable Channel Update
2015-09-01 00:00:00
osv
osv
chromium-browser - security update
2015-09-03 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-09-01 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0356)
2015-10-15 00:00:00
Debian: Security Advisory (DSA-3351-1)
2015-09-02 00:00:00
Debian Security Advisory DSA 3351-1 (chromium-browser - security update)
2015-09-03 00:00:00
redhat
redhat
(RHSA-2015:1712) Important: chromium-browser security update
2015-09-03 00:00:00
mageia
mageia
Updated chromium-browser packages fix security vulnerabilities
2015-09-08 20:55:59
archlinux
archlinux
chromium: multiple issues
2015-09-02 00:00:00
debian
debian
[SECURITY] [DSA 3351-1] chromium-browser security update
2015-09-03 22:10:19
[SECURITY] [DSA 3351-1] chromium-browser security update
2015-09-03 22:10:19
kaspersky
kaspersky
KLA10655 Multiple vulnerabilities in Google Chrome
2015-09-01 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for DEBIANCVE:CVE-2015-1298