CVEvulnerability

CVE-2015-1235

5.0 MEDIUM Published 2015-04-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-04-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.

Affected configurations

• canonical ubuntu linux 14.04 • canonical ubuntu linux 14.10 • canonical ubuntu linux 15.04 • google chrome (<= 42.0.2311.60) • debian debian linux 8.0

Related

Weakness · not in database (1)

References