CVE

Id
78581  
CVE No.
CVE-2015-1304  
Status
Candidate  
Description
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717848 78581 CVE-2015-1304 CONFIRM:http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html  View
717849 78581 CVE-2015-1304 CONFIRM:https://chromium.googlesource.com/v8/v8/+/9b0fb52b57021473aa813f3fb99ad7384a8b86f1  View
717850 78581 CVE-2015-1304 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=531891  View
717851 78581 CVE-2015-1304 DEBIAN:DSA-3376  View
717852 78581 CVE-2015-1304 URL:http://www.debian.org/security/2015/dsa-3376  View
717853 78581 CVE-2015-1304 GENTOO:GLSA-201603-09  View
717854 78581 CVE-2015-1304 URL:https://security.gentoo.org/glsa/201603-09  View
717855 78581 CVE-2015-1304 REDHAT:RHSA-2015:1841  View
717856 78581 CVE-2015-1304 URL:http://rhn.redhat.com/errata/RHSA-2015-1841.html  View
717857 78581 CVE-2015-1304 SUSE:openSUSE-SU-2015:1876  View
717858 78581 CVE-2015-1304 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html  View
717859 78581 CVE-2015-1304 SUSE:openSUSE-SU-2015:1719  View
717860 78581 CVE-2015-1304 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html  View
717861 78581 CVE-2015-1304 UBUNTU:USN-2757-1  View
717862 78581 CVE-2015-1304 URL:http://www.ubuntu.com/usn/USN-2757-1  View
717863 78581 CVE-2015-1304 BID:76844  View
717864 78581 CVE-2015-1304 URL:http://www.securityfocus.com/bid/76844  View
717865 78581 CVE-2015-1304 SECTRACK:1033683  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6216 JVNDB-2015-001536 Siemens SIMATIC STEP 7 における任意の認証データを確定される脆弱性 Siemens SIMATIC STEP 7 (TIA Portal) は、完全性保護が欠落しているプロジェクトファイルフィールドに基づいてユーザの特権を特定するため、任意の認証データを確定される脆弱性が存在します。 CVE-2015-1356 78581 4.4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001536.html  View