CVE-2015-1278

MEDIUM · 4.3 CVSS Gepubliceerd: 23-07-2015 CWE-254

Beschrijving

content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.

Vendors

Debian Redhat Google Opensuse

Affected products

Debian Linux Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary Enterprise Linux Server Supplementary Eus Enterprise Linux Workstation Supplementary Chrome Opensuse

References

googlechromereleases.blogspot.com
lists.opensuse.org
rhn.redhat.com
www.debian.org
www.securityfocus.com
www.securitytracker.com
code.google.com
codereview.chromium.org
codereview.chromium.org
security.gentoo.org