CVE

Id
78580  
CVE No.
CVE-2015-1303  
Status
Candidate  
Description
bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717830 78580 CVE-2015-1303 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html  View
717831 78580 CVE-2015-1303 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=530301  View
717832 78580 CVE-2015-1303 CONFIRM:https://codereview.chromium.org/1339023002  View
717833 78580 CVE-2015-1303 DEBIAN:DSA-3376  View
717834 78580 CVE-2015-1303 URL:http://www.debian.org/security/2015/dsa-3376  View
717835 78580 CVE-2015-1303 GENTOO:GLSA-201603-09  View
717836 78580 CVE-2015-1303 URL:https://security.gentoo.org/glsa/201603-09  View
717837 78580 CVE-2015-1303 REDHAT:RHSA-2015:1841  View
717838 78580 CVE-2015-1303 URL:http://rhn.redhat.com/errata/RHSA-2015-1841.html  View
717839 78580 CVE-2015-1303 SUSE:openSUSE-SU-2015:1876  View
717840 78580 CVE-2015-1303 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html  View
717841 78580 CVE-2015-1303 SUSE:openSUSE-SU-2015:1719  View
717842 78580 CVE-2015-1303 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html  View
717843 78580 CVE-2015-1303 UBUNTU:USN-2757-1  View
717844 78580 CVE-2015-1303 URL:http://www.ubuntu.com/usn/USN-2757-1  View
717845 78580 CVE-2015-1303 BID:76844  View
717846 78580 CVE-2015-1303 URL:http://www.securityfocus.com/bid/76844  View
717847 78580 CVE-2015-1303 SECTRACK:1033683  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6215 JVNDB-2015-001535 Siemens SIMATIC STEP 7 における平文パスワードを特定される脆弱性 Siemens SIMATIC STEP 7 (TIA Portal) は、脆弱なパスワードハッシュアルゴリズムを使用するため、平文パスワードを特定される脆弱性が存在します。 CVE-2015-1355 78580 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001535.html  View