NVD

Id
23572  
Name
CVE-2015-1210  
Description
The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-02-06  
Modified Date
2015-03-11  
Seq
2015-1210  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124929 23572 CVE-2015-1210 http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html  View
124930 23572 CVE-2015-1210 http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html  View
124931 23572 CVE-2015-1210 openSUSE-SU-2015:0441  View
124932 23572 CVE-2015-1210 RHSA-2015:0163  View
124933 23572 CVE-2015-1210 62917  View
124934 23572 CVE-2015-1210 62925  View
124935 23572 CVE-2015-1210 GLSA-201502-13  View
124936 23572 CVE-2015-1210 72497  View
124937 23572 CVE-2015-1210 1031709  View
124938 23572 CVE-2015-1210 USN-2495-1  View
124939 23572 CVE-2015-1210 google-chrome-cve20151210-sec-bypass(100716)  View
124940 23572 CVE-2015-1210 https://code.google.com/p/chromium/issues/detail?id=453979  View
124941 23572 CVE-2015-1210 https://src.chromium.org/viewvc/blink?revision=189365&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6018 JVNDB-2015-001338 Google Chrome で使用される Blink の V8 バインディングにおける同一生成元ポリシーを回避される脆弱性 Google Chrome で使用される Blink の V8 バインディングの bindings/core/v8/V8ThrowException.cpp の V8ThrowException::createDOMException 関数は、例外をスローしている間、フレームのアクセス制限を適切に考慮しないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2015-1210 78435 CVE-2015-1210 23572 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001338.html 2015-02-04 2015-02-25 View