Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-1248

Опубликовано: 19 апр. 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 4.3

Описание

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.

РелизСтатусПримечание
devel

released

43.0.2357.81-0ubuntu1.1179
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [43.0.2357.81-0ubuntu0.14.04.1.1089]]
lucid

ignored

end of life
precise

ignored

trusty

released

43.0.2357.81-0ubuntu0.14.04.1.1089
trusty/esm

DNE

trusty was released [43.0.2357.81-0ubuntu0.14.04.1.1089]
upstream

released

42.0.2311.90
utopic

released

43.0.2357.81-0ubuntu0.14.10.1.1131
vivid

released

43.0.2357.81-0ubuntu0.15.04.1.1170
wily

released

43.0.2357.81-0ubuntu1.1179

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
lucid

DNE

precise

DNE

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

not-affected

utopic

not-affected

vivid

not-affected

wily

not-affected

Показывать по

4.3 Medium

CVSS2

Связанные уязвимости

redhat
почти 11 лет назад

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.

nvd
почти 11 лет назад

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.

debian
почти 11 лет назад

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote ...

github
больше 3 лет назад

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.

fstec
почти 11 лет назад

Уязвимость интерфейса File System API браузера Google Chrome, позволяющая удаленному нарушителю обойти защитный механизм SafeBrowsing

4.3 Medium

CVSS2