NVD

Id
25193  
Name
CVE-2015-3336  
Description
Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service (UI disruption) by constructing a crafted HTML document containing JavaScript code with requestFullScreen and requestPointerLock calls, and arranging for the user to access this document with a file: URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-04-19  
Modified Date
2017-01-03  
Seq
2015-3336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133289 25193 CVE-2015-3336 http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
133290 25193 CVE-2015-3336 openSUSE-SU-2015:0748  View
133291 25193 CVE-2015-3336 DSA-3238  View
133292 25193 CVE-2015-3336 74227  View
133293 25193 CVE-2015-3336 https://code.google.com/p/chromium/issues/detail?id=455953  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7087 JVNDB-2015-002407 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome は、CONTENT_SETTINGS_TYPE_FULLSCREEN および CONTENT_SETTINGS_TYPE_MOUSELOCK の変更を処理する前にユーザに確認しないため、サービス運用妨害 (UI の混乱) 状態にされる脆弱性が存在します。 CVE-2015-3336 80561 CVE-2015-3336 25193 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002407.html 2015-04-14 2015-04-21 View