ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
| Π Π΅Π»ΠΈΠ· | Π‘ΡΠ°ΡΡΡ | ΠΡΠΈΠΌΠ΅ΡΠ°Π½ΠΈΠ΅ |
|---|---|---|
| devel | released | 53.0.2785.143-0ubuntu1.1307 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [52.0.2743.116-0ubuntu0.14.04.1.1134]] |
| precise | ignored | |
| trusty | released | 52.0.2743.116-0ubuntu0.14.04.1.1134 |
| trusty/esm | DNE | trusty was released [52.0.2743.116-0ubuntu0.14.04.1.1134] |
| upstream | released | 52.0.2743.82 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| wily | ignored | end of life |
| xenial | released | 52.0.2743.116-0ubuntu0.16.04.1.1250 |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
| Π Π΅Π»ΠΈΠ· | Π‘ΡΠ°ΡΡΡ | ΠΡΠΈΠΌΠ΅ΡΠ°Π½ΠΈΠ΅ |
|---|---|---|
| devel | released | 1.16.7-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.16.5-0ubuntu0.14.04.1]] |
| esm-infra-legacy/xenial | released | 1.16.5-0ubuntu0.16.04.1 |
| esm-infra/xenial | released | 1.16.5-0ubuntu0.16.04.1 |
| precise | DNE | |
| trusty | released | 1.16.5-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [1.16.5-0ubuntu0.14.04.1] |
| upstream | released | 1.16.5 |
| vivid/stable-phone-overlay | released | 1.17.9-0ubuntu0.15.04.1~overlay2 |
| vivid/ubuntu-core | DNE |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeC ...
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΡΠ°ΡΠ·Π΅ΡΠ° Google Chrome, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ ΠΎΠ±ΠΎΠΉΡΠΈ ΡΡΡΠ΅ΡΡΠ²ΡΡΡΡΡ ΠΏΠΎΠ»ΠΈΡΠΈΠΊΡ ΠΎΠ³ΡΠ°Π½ΠΈΡΠ΅Π½ΠΈΡ Π΄ΠΎΡΡΡΠΏΠ°
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3