CVE

Id
78568  
CVE No.
CVE-2015-1291  
Status
Candidate  
Description
The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717650 78568 CVE-2015-1291 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html  View
717651 78568 CVE-2015-1291 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=516377  View
717652 78568 CVE-2015-1291 CONFIRM:https://src.chromium.org/viewvc/blink?revision=200098&view=revision  View
717653 78568 CVE-2015-1291 DEBIAN:DSA-3351  View
717654 78568 CVE-2015-1291 URL:http://www.debian.org/security/2015/dsa-3351  View
717655 78568 CVE-2015-1291 GENTOO:GLSA-201603-09  View
717656 78568 CVE-2015-1291 URL:https://security.gentoo.org/glsa/201603-09  View
717657 78568 CVE-2015-1291 REDHAT:RHSA-2015:1712  View
717658 78568 CVE-2015-1291 URL:http://rhn.redhat.com/errata/RHSA-2015-1712.html  View
717659 78568 CVE-2015-1291 SUSE:openSUSE-SU-2015:1873  View
717660 78568 CVE-2015-1291 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html  View
717661 78568 CVE-2015-1291 SUSE:openSUSE-SU-2015:1586  View
717662 78568 CVE-2015-1291 URL:http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html  View
717663 78568 CVE-2015-1291 SECTRACK:1033472  View

Related JVN