Описание
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 43.0.2357.130-0ubuntu1.1188 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [43.0.2357.130-0ubuntu0.14.04.1.1092]] |
| precise | ignored | |
| trusty | released | 43.0.2357.130-0ubuntu0.14.04.1.1092 |
| trusty/esm | DNE | trusty was released [43.0.2357.130-0ubuntu0.14.04.1.1092] |
| upstream | released | 43.0.2357.130 |
| utopic | released | 43.0.2357.130-0ubuntu0.14.10.1.1134 |
| vivid | released | 43.0.2357.130-0ubuntu0.15.04.1.1174 |
| wily | released | 43.0.2357.130-0ubuntu1.1188 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.7.9-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.7.9-0ubuntu0.14.04.1]] |
| precise | DNE | |
| trusty | released | 1.7.9-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [1.7.9-0ubuntu0.14.04.1] |
| upstream | released | 1.7.9 |
| utopic | released | 1.7.9-0ubuntu0.14.10.1 |
| vivid | released | 1.7.9-0ubuntu0.15.04.1 |
| wily | released | 1.7.9-0ubuntu1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
Связанные уязвимости
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
Blink, as used in Google Chrome before 43.0.2357.130, does not properl ...
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.
Уязвимость браузера Google Chrome, позволяющая нарушителю обойти ограничения доступа
EPSS
5 Medium
CVSS2