Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-6762HistoryOct 15, 2015 - 10:59 a.m.
CVE-2015-6762
2015-10-1510:59:00
Debian Security Bug Tracker
security-tracker.debian.org
3
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font’s URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | chromium-browser | < 70.0.3538.110-1~deb9u1 | chromium-browser_70.0.3538.110-1~deb9u1_all.deb |
Related
prion
prion
Cross site scripting
2015-10-15 10:59:00
ubuntucve
ubuntucve
CVE-2015-6762
2015-10-15 00:00:00
cve
cve
CVE-2015-6762
2015-10-15 10:59:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-10-22 00:00:00
Oxide vulnerabilities
2015-10-20 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2770-1)
2015-10-21 00:00:00
Ubuntu 15.10 : oxide-qt vulnerabilities (USN-2770-2)
2015-10-23 00:00:00
RHEL 6 : chromium-browser (RHSA-2015:1912)
2015-10-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2770-1)
2015-10-21 00:00:00
Ubuntu: Security Advisory (USN-2770-2)
2015-10-26 00:00:00
Google Chrome Multiple Vulnerabilities-01 (Oct 2015) - Windows
2015-10-19 00:00:00
threatpost
threatpost
Chrome 46 Patches, Mixed Content Warning Changes
2015-10-14 14:28:19
redhat
redhat
(RHSA-2015:1912) Important: chromium-browser security update
2015-10-15 00:00:00
archlinux
archlinux
chromium: multiple issues
2015-10-14 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-10-25 19:34:48
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-10-13 00:00:00
kaspersky
kaspersky
KLA10678 Multiple vulnerabilities in Google Chrome
2015-10-13 00:00:00
debian
debian
[SECURITY] [DSA 3376-1] chromium-browser security update
2015-10-21 03:08:24
[SECURITY] [DSA 3376-1] chromium-browser security update
2015-10-21 03:08:24
securityvulns
securityvulns
Google Chrome / Chromium / Oxide multiple security vulnerabilities
2015-10-25 00:00:00
[SECURITY] [DSA 3376-1] chromium-browser security update
2015-10-25 00:00:00
osv
osv
chromium-browser - security update
2015-10-20 00:00:00
chrome
chrome
Stable Channel Update
2015-10-13 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for DEBIANCVE:CVE-2015-6762