CVE-2015-1304
12.10.2015, 01:59
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.Enginsight
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 45.0.2454.93 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||||||||||
| libv8 |
| ||||||||||||||||||||
| libv8-3.14 |
| ||||||||||||||||||||
| oxide-qt |
|
Common Weakness Enumeration
References