CVE

Id
78562  
CVE No.
CVE-2015-1285  
Status
Candidate  
Description
The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717570 78562 CVE-2015-1285 CONFIRM:http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html  View
717571 78562 CVE-2015-1285 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=498982  View
717572 78562 CVE-2015-1285 CONFIRM:https://src.chromium.org/viewvc/blink?revision=196971&view=revision  View
717573 78562 CVE-2015-1285 DEBIAN:DSA-3315  View
717574 78562 CVE-2015-1285 URL:http://www.debian.org/security/2015/dsa-3315  View
717575 78562 CVE-2015-1285 GENTOO:GLSA-201603-09  View
717576 78562 CVE-2015-1285 URL:https://security.gentoo.org/glsa/201603-09  View
717577 78562 CVE-2015-1285 REDHAT:RHSA-2015:1499  View
717578 78562 CVE-2015-1285 URL:http://rhn.redhat.com/errata/RHSA-2015-1499.html  View
717579 78562 CVE-2015-1285 SUSE:openSUSE-SU-2015:1287  View
717580 78562 CVE-2015-1285 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html  View
717581 78562 CVE-2015-1285 BID:75973  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9858 JVNDB-2015-005178 Simple Streams におけるディスク画像を偽造される脆弱性 Simple Streams (simplestreams) は、ディスク画像ファイルの GPG 署名を適切に検証しないため、ディスク画像を偽造されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-1337 78562 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005178.html  View