Published: 19/04/2015 Updated: 26/01/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Google Chrome prior to 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote malicious users to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
debian debian linux 8.0
canonical ubuntu linux 14.10
canonical ubuntu linux 15.04
canonical ubuntu linux 14.04
opensuse opensuse 13.1
opensuse opensuse 13.2
suse linux enterprise 12.0
redhat enterprise linux server aus 6.6
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux eus 6.6
redhat enterprise linux server eus 6.6

Several security issues were fixed in Oxide ...

Several vulnerabilities were discovered in the chromium web browser CVE-2015-1235 A Same Origin Policy bypass issue was discovered in the HTML parser CVE-2015-1236 Amitay Dobo discovered a Same Origin Policy bypass in the Web Audio API CVE-2015-1237 Khalil Zhani discovered a use-after-free issue in IPC CVE-2015-1238 clo ...

Google Chrome before 420231190 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack ...

CWE-1021 http://rhn.redhat.com/errata/RHSA-2015-0816.html https://codereview.chromium.org/660663002 http://ubuntu.com/usn/usn-2570-1 https://codereview.chromium.org/717573004 http://www.debian.org/security/2015/dsa-3238 http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html https://security.gentoo.org/glsa/201506-04 http://www.securitytracker.com/id/1032209 https://codereview.chromium.org/868123002 https://codereview.chromium.org/628763003 http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html https://code.google.com/p/chromium/issues/detail?id=418402 https://usn.ubuntu.com/2570-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-1241

CVE-2015-1241

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect