CVE

Id
80611  
CVE No.
CVE-2015-3334  
Status
Candidate  
Description
browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a device"s physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited.  
Phase
Assigned (20150419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729014 80611 CVE-2015-3334 CONFIRM:http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
729015 80611 CVE-2015-3334 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=433170  View
729016 80611 CVE-2015-3334 DEBIAN:DSA-3238  View
729017 80611 CVE-2015-3334 URL:http://www.debian.org/security/2015/dsa-3238  View
729018 80611 CVE-2015-3334 SUSE:openSUSE-SU-2015:0748  View
729019 80611 CVE-2015-3334 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html  View
729020 80611 CVE-2015-3334 BID:74225  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7134 JVNDB-2015-002454 Drupal 用 Node Access Product モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Node Access Product モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-3386 80611 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002454.html  View