CVE-2015-1241

EUVD-2015-1382
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
< 42.0.2311.90
debiandebian_linux
8.0
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
canonicalubuntu_linux
15.04
opensuseopensuse
13.1
opensuseopensuse
13.2
suselinux_enterprise
12.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.6
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
6.6
redhatenterprise_linux_server_eus
6.6
redhatenterprise_linux_workstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089
released
utopic
Fixed 43.0.2357.81-0ubuntu0.14.10.1.1131
released
vivid
Fixed 43.0.2357.81-0ubuntu0.15.04.1.1170
released
wily
Fixed 43.0.2357.81-0ubuntu1.1179
released
oxide-qt
lucid
dne
precise
dne
trusty
Fixed 1.6.5-0ubuntu0.14.04.1
released
utopic
Fixed 1.6.5-0ubuntu0.14.10.1
released
vivid
Fixed 1.6.5-0ubuntu0.15.04.1
released
wily
Fixed 1.7.7-0ubuntu0.15.04.1~ppa1
released