CVE-2015-1304
Publication date 29 September 2015
Last updated 24 July 2024
Ubuntu priority
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | ||
18.04 LTS bionic |
Fixed 45.0.2454.101-0ubuntu1.1201
|
|
16.04 LTS xenial |
Fixed 45.0.2454.101-0ubuntu1.1201
|
|
14.04 LTS trusty |
Fixed 45.0.2454.101-0ubuntu0.14.04.1.1099
|
|
libv8 | ||
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
libv8-3.14 | ||
18.04 LTS bionic | Ignored libv8 not supported | |
16.04 LTS xenial | Ignored libv8 not supported | |
14.04 LTS trusty | Not in release | |
oxide-qt | ||
18.04 LTS bionic | Not in release | |
16.04 LTS xenial |
Fixed 1.9.5-0ubuntu1
|
|
14.04 LTS trusty |
Fixed 1.9.5-0ubuntu0.14.04.1
|
|
Notes
References
Related Ubuntu Security Notices (USN)
- USN-2757-1
- Oxide vulnerabilities
- 5 October 2015