NVD

Id
23602  
Name
CVE-2015-1241  
Description
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-04-19  
Modified Date
2017-01-02  
Seq
2015-1241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
125206 23602 CVE-2015-1241 http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
125207 23602 CVE-2015-1241 openSUSE-SU-2015:0748  View
125208 23602 CVE-2015-1241 openSUSE-SU-2015:1887  View
125209 23602 CVE-2015-1241 RHSA-2015:0816  View
125210 23602 CVE-2015-1241 USN-2570-1  View
125211 23602 CVE-2015-1241 DSA-3238  View
125212 23602 CVE-2015-1241 1032209  View
125213 23602 CVE-2015-1241 https://code.google.com/p/chromium/issues/detail?id=418402  View
125214 23602 CVE-2015-1241 https://codereview.chromium.org/628763003  View
125215 23602 CVE-2015-1241 https://codereview.chromium.org/660663002  View
125216 23602 CVE-2015-1241 https://codereview.chromium.org/717573004  View
125217 23602 CVE-2015-1241 https://codereview.chromium.org/868123002  View
125218 23602 CVE-2015-1241 GLSA-201506-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7076 JVNDB-2015-002396 Google Chrome における意図しない UI アクションを誘発される脆弱性 Google Chrome は、タッチイベントおよびジェスチャーイベントの処理と、ページナビゲーションとの相互作用を適切に考慮しないため、意図しない UI アクションを誘発される脆弱性が存在します。 CVE-2015-1241 78466 CVE-2015-1241 23602 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002396.html 2015-04-14 2015-04-21 View