NVD

Id
23608  
Name
CVE-2015-1247  
Description
The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-04-19  
Modified Date
2017-01-02  
Seq
2015-1247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
125268 23608 CVE-2015-1247 http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
125269 23608 CVE-2015-1247 openSUSE-SU-2015:0748  View
125270 23608 CVE-2015-1247 openSUSE-SU-2015:1887  View
125271 23608 CVE-2015-1247 RHSA-2015:0816  View
125272 23608 CVE-2015-1247 DSA-3238  View
125273 23608 CVE-2015-1247 1032209  View
125274 23608 CVE-2015-1247 https://code.google.com/p/chromium/issues/detail?id=429838  View
125275 23608 CVE-2015-1247 https://codereview.chromium.org/917313004  View
125276 23608 CVE-2015-1247 GLSA-201506-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7081 JVNDB-2015-002401 Google Chrome の browser/ui/search_engines/search_engine_tab_helper.cc におけるローカルファイルから重要な情報を取得される脆弱性 Google Chrome の browser/ui/search_engines/search_engine_tab_helper.cc の SearchEngineTabHelper::OnPageHasOSDD 関数は、OpenSearch 記述子の XML ドキュメント用の file: URL の使用を適切に制限しないため、ローカルファイルから重要な情報を取得される脆弱性が存在します。 CVE-2015-1247 78472 CVE-2015-1247 23608 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002401.html 2015-04-14 2015-04-21 View