NVD

Id
23573  
Name
CVE-2015-1211  
Description
The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-06  
Modified Date
2015-03-11  
Seq
2015-1211  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124942 23573 CVE-2015-1211 http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html  View
124943 23573 CVE-2015-1211 http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html  View
124944 23573 CVE-2015-1211 openSUSE-SU-2015:0441  View
124945 23573 CVE-2015-1211 RHSA-2015:0163  View
124946 23573 CVE-2015-1211 62917  View
124947 23573 CVE-2015-1211 62925  View
124948 23573 CVE-2015-1211 GLSA-201502-13  View
124949 23573 CVE-2015-1211 72497  View
124950 23573 CVE-2015-1211 1031709  View
124951 23573 CVE-2015-1211 USN-2495-1  View
124952 23573 CVE-2015-1211 google-chrome-cve20151211-priv-esc(100717)  View
124953 23573 CVE-2015-1211 https://code.google.com/p/chromium/issues/detail?id=453982  View
124954 23573 CVE-2015-1211 https://codereview.chromium.org/889323002  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6017 JVNDB-2015-001337 Google Chrome の content/browser/service_worker/service_worker_dispatcher_host.cc における権限を取得される脆弱性 Google Chrome の content/browser/service_worker/service_worker_dispatcher_host.cc の OriginCanAccessServiceWorkers 関数は、ServiceWorker の登録中、URI スキームを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2015-1211 78436 CVE-2015-1211 23573 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001337.html 2015-02-04 2015-02-25 View