CVE

Id
78575  
CVE No.
CVE-2015-1298  
Status
Candidate  
Description
The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717749 78575 CVE-2015-1298 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html  View
717750 78575 CVE-2015-1298 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=518827  View
717751 78575 CVE-2015-1298 CONFIRM:https://codereview.chromium.org/1282263002/  View
717752 78575 CVE-2015-1298 DEBIAN:DSA-3351  View
717753 78575 CVE-2015-1298 URL:http://www.debian.org/security/2015/dsa-3351  View
717754 78575 CVE-2015-1298 GENTOO:GLSA-201603-09  View
717755 78575 CVE-2015-1298 URL:https://security.gentoo.org/glsa/201603-09  View
717756 78575 CVE-2015-1298 REDHAT:RHSA-2015:1712  View
717757 78575 CVE-2015-1298 URL:http://rhn.redhat.com/errata/RHSA-2015-1712.html  View
717758 78575 CVE-2015-1298 SUSE:openSUSE-SU-2015:1873  View
717759 78575 CVE-2015-1298 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html  View
717760 78575 CVE-2015-1298 SUSE:openSUSE-SU-2015:1586  View
717761 78575 CVE-2015-1298 URL:http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html  View
717762 78575 CVE-2015-1298 SECTRACK:1033472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11803 JVNDB-2015-007123 Linux Kernel の VFS サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の VFS サブシステムは、setattr 操作に不完全な一連の要求を提供し、拡張された特権属性の削除を曖昧に示すため、サービス運用妨害 (ケーパビリティの除去 (capability stripping)) 状態にされる脆弱性が存在します。 CVE-2015-1350 78575 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007123.html  View