CVE

Id
78574  
CVE No.
CVE-2015-1297  
Status
Candidate  
Description
The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request"s source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717735 78574 CVE-2015-1297 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html  View
717736 78574 CVE-2015-1297 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=510802  View
717737 78574 CVE-2015-1297 CONFIRM:https://codereview.chromium.org/1267183003/  View
717738 78574 CVE-2015-1297 DEBIAN:DSA-3351  View
717739 78574 CVE-2015-1297 URL:http://www.debian.org/security/2015/dsa-3351  View
717740 78574 CVE-2015-1297 GENTOO:GLSA-201603-09  View
717741 78574 CVE-2015-1297 URL:https://security.gentoo.org/glsa/201603-09  View
717742 78574 CVE-2015-1297 REDHAT:RHSA-2015:1712  View
717743 78574 CVE-2015-1297 URL:http://rhn.redhat.com/errata/RHSA-2015-1712.html  View
717744 78574 CVE-2015-1297 SUSE:openSUSE-SU-2015:1873  View
717745 78574 CVE-2015-1297 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html  View
717746 78574 CVE-2015-1297 SUSE:openSUSE-SU-2015:1586  View
717747 78574 CVE-2015-1297 URL:http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html  View
717748 78574 CVE-2015-1297 SECTRACK:1033472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6214 JVNDB-2015-001534 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性 ISC BIND 9 には、トラストアンカーの管理において、特定の条件下で named が終了する、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2015-1349 78574 5.4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001534.html  View