NVD

Id
23663  
Name
CVE-2015-1303  
Description
bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-11  
Modified Date
2016-12-23  
Seq
2015-1303  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
125848 23663 CVE-2015-1303 http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html  View
125849 23663 CVE-2015-1303 openSUSE-SU-2015:1719  View
125850 23663 CVE-2015-1303 openSUSE-SU-2015:1876  View
125851 23663 CVE-2015-1303 RHSA-2015:1841  View
125852 23663 CVE-2015-1303 DSA-3376  View
125853 23663 CVE-2015-1303 76844  View
125854 23663 CVE-2015-1303 1033683  View
125855 23663 CVE-2015-1303 USN-2757-1  View
125856 23663 CVE-2015-1303 https://code.google.com/p/chromium/issues/detail?id=530301  View
125857 23663 CVE-2015-1303 https://codereview.chromium.org/1339023002  View
125858 23663 CVE-2015-1303 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9867 JVNDB-2015-005187 Google Chrome で使用される Blink の bindings/core/v8/V8DOMWrapper.h における同一生成元ポリシーを回避される脆弱性 Google Chrome で使用される Blink の bindings/core/v8/V8DOMWrapper.h は、cross-context 例外を再スローアクションしないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2015-1303 78528 CVE-2015-1303 23663 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005187.html 2015-09-24 2015-10-14 View