CVE-2015-1241

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
googlechrome
𝑥
< 42.0.2311.90
debiandebian_linux
8.0
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
canonicalubuntu_linux
15.04
opensuseopensuse
13.1
opensuseopensuse
13.2
suselinux_enterprise
12.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.6
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
6.6
redhatenterprise_linux_server_eus
6.6
redhatenterprise_linux_workstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
wily
Fixed 43.0.2357.81-0ubuntu1.1179
released
vivid
Fixed 43.0.2357.81-0ubuntu0.15.04.1.1170
released
utopic
Fixed 43.0.2357.81-0ubuntu0.14.10.1.1131
released
trusty
Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089
released
precise
ignored
lucid
ignored
oxide-qt
wily
Fixed 1.7.7-0ubuntu0.15.04.1~ppa1
released
vivid
Fixed 1.6.5-0ubuntu0.15.04.1
released
utopic
Fixed 1.6.5-0ubuntu0.14.10.1
released
trusty
Fixed 1.6.5-0ubuntu0.14.04.1
released
precise
dne
lucid
dne