NetSight
IP …
medium4.3

CVE-2015-1241

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which all…

Impact

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

Affected products

VendorProductAffected versions
GoogleChrome
before 42.0.2311.90
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 14.10, 15.04
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise
Version 12.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.6
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Version 6.6
RedhatEnterprise Linux Server Eus
Version 6.6
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-1021

References