Your submission was sent successfully! Close

CVE-2015-1235

Published: 19 April 2015

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.

Priority

Medium

Status

Package Release Status
chromium-browser
Launchpad, Ubuntu, Debian
Upstream
Released (42.0.2311.90)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [43.0.2357.81-0ubuntu0.14.04.1.1089])
oxide-qt
Launchpad, Ubuntu, Debian
Upstream
Released (1.6.5)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [1.6.5-0ubuntu0.14.04.1])