CVE-2015-3334
https://notcve.org/view.php?id=CVE-2015-3334
19 Apr 2015 — browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a device's physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited. browser/ui/website_settings/website_settings.cc en ... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-17: DEPRECATED: Code •
CVE-2015-3335
https://notcve.org/view.php?id=CVE-2015-3335
19 Apr 2015 — The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox. La función NaClSandbox::InitializeLayerTwoSandbox en components/nacl/loader/sandbox_linux/n... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2015-3336
https://notcve.org/view.php?id=CVE-2015-3336
19 Apr 2015 — Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service (UI disruption) by constructing a crafted HTML document containing JavaScript code with requestFullScreen and requestPointerLock calls, and arranging for the user to access this document with a file: URL. Google Chrome anterior a 42.0.2311.90 no siempre pregunta al usuario a... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2015-1235 – chromium-browser: Cross-origin-bypass in HTML parser
https://notcve.org/view.php?id=CVE-2015-1235
17 Apr 2015 — The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element. La función ContainerNode::parserRemoveChild en core/dom/ContainerNode.cpp en el analizador sintáctico de HTML en Blink, utilizado en Google Chrome anterior a 42.0.2311.90, permite a atacantes remotos evadir Same Origin Policy a través de un documento H... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-264: Permissions, Privileges, and Access Controls CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2015-1236 – chromium-browser: Cross-origin-bypass in Blink
https://notcve.org/view.php?id=CVE-2015-1236
17 Apr 2015 — The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element. La función MediaElementAudioSourceNode::process en modules/webaudio/MediaElementAudioSourceNode.cpp en la implementación Web Audio API en Blink, utilizado en Google Chro... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-264: Permissions, Privileges, and Access Controls CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2015-1237 – chromium-browser: Use-after-free in IPC
https://notcve.org/view.php?id=CVE-2015-1237
17 Apr 2015 — Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation. Vulnerabilidad de uso después de liberación en la función RenderFrameImpl::OnMessageReceived en content/renderer/render_frame_impl.cc en Google Chrome anterior a 42.0.2311.90 permite a ... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-416: Use After Free •
CVE-2015-1238 – chromium-browser: Out-of-bounds write in Skia
https://notcve.org/view.php?id=CVE-2015-1238
17 Apr 2015 — Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors. Skia, utilizado en Google Chrome anterior a 42.0.2311.90, permite a atacantes remotos causar una denegación de servicio (escritura fuera de rango) o posiblemente tener otro impacto no especificado a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVE-2015-1240 – chromium-browser: Out-of-bounds read in WebGL
https://notcve.org/view.php?id=CVE-2015-1240
17 Apr 2015 — gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency. gpu/blink/webgraphicscontext3d_impl.cc en la implementación WebGL en Google Chrome anterior a 42.0.2311.90 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) a través de un programa WebGL manipulado que provoca una inconsistencia de ... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •
CVE-2015-1241 – chromium-browser: tap-jacking vulnerability
https://notcve.org/view.php?id=CVE-2015-1241
17 Apr 2015 — Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack. Google Chrome anterior a 42.0.2311.90 no considera correctamente la interacción de la navegación de páginas con el manejo de los eventos 'táctiles' (touch) y los eventos de 'gestos' (gesture), lo que permite a atacantes remotos provocar ac... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-352: Cross-Site Request Forgery (CSRF) CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVE-2015-1242 – chromium-browser: Type confusion in V8
https://notcve.org/view.php?id=CVE-2015-1242
17 Apr 2015 — The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization. La función ReduceTransitionElementsKind en hydrogen-check-elimination.cc en Google V8 anterior a 4.2.77.8, utilizado en Google Chrome anterior a 42.0.2311.90, permite ... • http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html • CWE-704: Incorrect Type Conversion or Cast •