PT-2015-1938 · Opera+4 · Opera+5

Igrigorik · Published 2015-08-29 · Updated 2024-06-15 · CVE-2015-1300

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85

Description The issue is related to the FrameFetchContext::updateTimingInfoForIFrameNavigation function in the Blink component of Google Chrome, which does not properly restrict the availability of IFRAME Resource Timing API times. This allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call. The vulnerability can be exploited by a remote attacker to gain access to protected information.

Recommendations For Google Chrome versions prior to 45.0.2454.85, update to version 45.0.2454.85 or later to resolve the issue. For Opera versions prior to 45.0.2454.85, update to a version that includes the fix for this issue, as the exact version is not specified. As a temporary workaround, consider restricting the use of the history.back call in crafted JavaScript code to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

ALT-PU-2015-1729

ALT-PU-2015-1756

BDU:2015-11284

CVE-2015-1300

DSA-3351-1

MGASA-2015-0356

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2015:1712

RHSA-2015_1712

USN-2735-1

Affected Products

Alt Linux

Blink

Google Chrome

Opera

Red Hat

Ubuntu

References · 2372

• https://osv.dev/vulnerability/DSA-3351-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0356.html · Security Note
• https://ubuntu.com/security/CVE-2015-1291 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11284 · Security Note
• https://ubuntu.com/security/CVE-2015-1299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1301 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1292 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2735-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1332 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html · Vendor Advisory
• https://security.gentoo.org/glsa/201603-09 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1300 · Security Note