medium4.3
CVE-2015-2239
Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restor…
Impact
Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveraging (1) a compromised search engine or (2) an XSS vulnerability in a search engine, a different vulnerability than CVE-2015-1231.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 40.0.2214.115 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
- http://www.securityfocus.com/bid/74855
- https://code.google.com/p/chromium/issues/detail?id=256724
- https://code.google.com/p/chromium/issues/detail?id=463349
- http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
- http://www.securityfocus.com/bid/74855
- https://code.google.com/p/chromium/issues/detail?id=256724
- https://code.google.com/p/chromium/issues/detail?id=463349