CVE

Id
78565  
CVE No.
CVE-2015-1288  
Status
Candidate  
Description
The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717607 78565 CVE-2015-1288 CONFIRM:http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html  View
717608 78565 CVE-2015-1288 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=479162  View
717609 78565 CVE-2015-1288 CONFIRM:https://codereview.chromium.org/1056103005  View
717610 78565 CVE-2015-1288 DEBIAN:DSA-3315  View
717611 78565 CVE-2015-1288 URL:http://www.debian.org/security/2015/dsa-3315  View
717612 78565 CVE-2015-1288 GENTOO:GLSA-201603-09  View
717613 78565 CVE-2015-1288 URL:https://security.gentoo.org/glsa/201603-09  View
717614 78565 CVE-2015-1288 REDHAT:RHSA-2015:1499  View
717615 78565 CVE-2015-1288 URL:http://rhn.redhat.com/errata/RHSA-2015-1499.html  View
717616 78565 CVE-2015-1288 SUSE:openSUSE-SU-2015:1287  View
717617 78565 CVE-2015-1288 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html  View
717618 78565 CVE-2015-1288 BID:75973  View

Related JVN