CVE

Id
80613  
CVE No.
CVE-2015-3336  
Status
Candidate  
Description
Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service (UI disruption) by constructing a crafted HTML document containing JavaScript code with requestFullScreen and requestPointerLock calls, and arranging for the user to access this document with a file: URL.  
Phase
Assigned (20150419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729026 80613 CVE-2015-3336 CONFIRM:http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
729027 80613 CVE-2015-3336 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=455953  View
729028 80613 CVE-2015-3336 DEBIAN:DSA-3238  View
729029 80613 CVE-2015-3336 URL:http://www.debian.org/security/2015/dsa-3238  View
729030 80613 CVE-2015-3336 SUSE:openSUSE-SU-2015:0748  View
729031 80613 CVE-2015-3336 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html  View
729032 80613 CVE-2015-3336 BID:74227  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7136 JVNDB-2015-002456 Drupal 用 Commerce Balanced Payments モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Commerce Balanced Payments モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2015-3388 80613 5.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002456.html  View