PT-2015-5681 · Google+1 · Google Chrome+1

Publicado 2015-03-09 · Atualizado 2016-12-03 · CVE-2015-2239

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76

Description The issue arises when Instant Extended mode is used, and there is improper consideration of the interaction between the "1993 search" features and restore-from-disk RELOAD transitions. This makes it easier for remote attackers to spoof the address bar for a search-results page by leveraging a compromised search engine or an XSS vulnerability in a search engine.

Recommendations For versions prior to 41.0.2272.76, update to version 41.0.2272.76 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2015-1298

CVE-2015-2239

Produtos afetados

Alt Linux

Google Chrome

Referências · 41

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1216 · Nota de Segurança
• https://code.google.com/p/chromium/issues/detail?id=446459 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1223 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1222 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2238 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1231 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1227 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5319 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-2239 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1226 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09972 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1206 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1219 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9689 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-2239 · Nota de Segurança