Ubuntu.comUB:CVE-2015-1254CVE-2015-1254
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.1%
core/dom/Document.cpp in Blink, as used in Google Chrome before
43.0.2357.65, enables the inheritance of the designMode attribute, which
allows remote attackers to bypass the Same Origin Policy by leveraging the
availability of editing.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | chromium-browser | < 43.0.2357.81-0ubuntu0.14.04.1.1089 | UNKNOWN |
| ubuntu | 14.10 | noarch | chromium-browser | < 43.0.2357.81-0ubuntu0.14.10.1.1131 | UNKNOWN |
| ubuntu | 15.04 | noarch | chromium-browser | < 43.0.2357.81-0ubuntu0.15.04.1.1170 | UNKNOWN |
| ubuntu | 15.10 | noarch | chromium-browser | < 43.0.2357.81-0ubuntu1.1179 | UNKNOWN |
| ubuntu | 14.04 | noarch | oxide-qt | < 1.7.8-0ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | oxide-qt | < 1.7.8-0ubuntu0.14.10.1 | UNKNOWN |
| ubuntu | 15.04 | noarch | oxide-qt | < 1.7.8-0ubuntu0.15.04.1 | UNKNOWN |
| ubuntu | 15.10 | noarch | oxide-qt | < 1.7.8-0ubuntu1 | UNKNOWN |
References
googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
code.google.com/p/chromium/issues/detail?id=444927
launchpad.net/bugs/cve/CVE-2015-1254
nvd.nist.gov/vuln/detail/CVE-2015-1254
security-tracker.debian.org/tracker/CVE-2015-1254
src.chromium.org/viewvc/blink?revision=192658&view=revision
ubuntu.com/security/notices/USN-2610-1
www.cve.org/CVERecord?id=CVE-2015-1254
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.1%