PT-2015-5192 · Opera+5 · Opera+6
Publicado
2015-07-21
·
Atualizado
2024-06-15
·
CVE-2015-1285
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 44.0.2403.89
Opera (affected versions not specified)
Description
The issue concerns the
XSSAuditor::canonicalize function in the XSS auditor in Blink, which does not properly choose a truncation point. This makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.Recommendations
For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Blink
Google Chrome
Opera
Red Hat
Suse
Ubuntu