CVE-2015-1287: Medium severity openSUSE openSUSE vulnerability
An unspecified sop bypass with css flaw was found in the unspecified component of the Chromium browser.
Upstream bug: https://code.google.com/p/chromium/issues/detail?id=419383
External References:
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update21.html
Other sources
Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks- ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Chrometo a version that resolves this vulnerability.Fixed in 44.0.2403.89 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 44.0.2403.89
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2015-1287.
How severe is CVE-2015-1287?
CVE-2015-1287 has a severity of 4.3 (medium).
What is the impact of CVE-2015-1287?
CVE-2015-1287 allows remote attackers to bypass the Same Origin Policy via a crafted website.
Which software versions are affected by CVE-2015-1287?
Google Chrome versions before 44.0.2403.89 are affected by CVE-2015-1287.
How can I fix CVE-2015-1287?
To fix CVE-2015-1287, update Google Chrome to version 44.0.2403.89 or later.