2 matches found
Code injection
The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...
5CVSS6.1AI score0.01396EPSS
SaveExploits0References9Affected Software2
CVE-2015-1247: Exposure of Sensitive Information to an Unauthorized Actor
The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/searchengines/searchenginetabhelper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local...
5CVSS6.1AI score0.01396EPSS
SaveExploits0References2
20