EUVD-2015-1439

Malware in sbrugna...

CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

Design/Logic Flaw

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

CVE-2015-1298

Removed by vendor...

CVE-2015-1298

CVE-2015-1298 affects Google Chrome/Chromium prior to 45.0.2454.85. The vulnerability stems from RuntimeEventRouter::OnExtensionUninstalled not validating that setUninstallURL matches a site URL, allowing a user-assisted attacker to trigger access to an arbitrary URL via a crafted extension that ...

CVE-2015-1298: Undefined Security Weakness

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtimeapi.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to a...

PT-2015-1936

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue is related to errors in security settings in the RuntimeEventRouter::OnExtensionUninstalled function of the Google Chrome browser. This...