NVD

Id
23598  
Name
CVE-2015-1236  
Description
The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-04-19  
Modified Date
2017-01-02  
Seq
2015-1236  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
125167 23598 CVE-2015-1236 http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
125168 23598 CVE-2015-1236 openSUSE-SU-2015:0748  View
125169 23598 CVE-2015-1236 openSUSE-SU-2015:1887  View
125170 23598 CVE-2015-1236 RHSA-2015:0816  View
125171 23598 CVE-2015-1236 USN-2570-1  View
125172 23598 CVE-2015-1236 DSA-3238  View
125173 23598 CVE-2015-1236 1032209  View
125174 23598 CVE-2015-1236 https://code.google.com/p/chromium/issues/detail?id=313939  View
125175 23598 CVE-2015-1236 GLSA-201506-04  View
125176 23598 CVE-2015-1236 https://src.chromium.org/viewvc/blink?revision=189527&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7072 JVNDB-2015-002392 Google Chrome で使用される Blink の Web Audio API の 実装における同一生成元ポリシーを回避される脆弱性 Google Chrome で使用される Blink の Web Audio API の 実装の modules/webaudio/MediaElementAudioSourceNode.cpp の MediaElementAudioSourceNode::process 関数には、同一生成元ポリシーを回避され、重要なオーディオサンプルの値を取得される脆弱性が存在します。 CVE-2015-1236 78461 CVE-2015-1236 23598 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002392.html 2015-04-14 2015-04-21 View