high7.5
CVE-2015-1293
The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Impact
The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 44.0.2403 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-1712.html
- http://www.debian.org/security/2015/dsa-3351
- http://www.securitytracker.com/id/1033472
- https://code.google.com/p/chromium/issues/detail?id=524074
- https://security.gentoo.org/glsa/201603-09
- http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-1712.html
- http://www.debian.org/security/2015/dsa-3351
- http://www.securitytracker.com/id/1033472
- https://code.google.com/p/chromium/issues/detail?id=524074
- https://security.gentoo.org/glsa/201603-09