CVE-2015-1236

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://src.chromium.org/viewvc/blink?revision=189527&view=revision
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html	Vendor Advisory
https://code.google.com/p/chromium/issues/detail?id=313939
http://ubuntu.com/usn/usn-2570-1
http://www.debian.org/security/2015/dsa-3238
http://www.securitytracker.com/id/1032209
http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
https://security.gentoo.org/glsa/201506-04
http://rhn.redhat.com/errata/RHSA-2015-0816.html
http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Information

Published : 2015-04-19 03:59

Updated : 2017-01-02 18:59

NVD link : CVE-2015-1236

Mitre link : CVE-2015-1236

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

debian

debian_linux

canonical

ubuntu_linux

google

chrome

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://src.chromium.org/viewvc/blink?revision=189527&view=revision", "name": "https://src.chromium.org/viewvc/blink?revision=189527&view=revision", "tags": [], "refsource": "CONFIRM"}, {"url": "http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html", "name": "http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=313939", "name": "https://code.google.com/p/chromium/issues/detail?id=313939", "tags": [], "refsource": "CONFIRM"}, {"url": "http://ubuntu.com/usn/usn-2570-1", "name": "USN-2570-1", "tags": [], "refsource": "UBUNTU"}, {"url": "http://www.debian.org/security/2015/dsa-3238", "name": "DSA-3238", "tags": [], "refsource": "DEBIAN"}, {"url": "http://www.securitytracker.com/id/1032209", "name": "1032209", "tags": [], "refsource": "SECTRACK"}, {"url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html", "name": "openSUSE-SU-2015:1887", "tags": [], "refsource": "SUSE"}, {"url": "https://security.gentoo.org/glsa/201506-04", "name": "GLSA-201506-04", "tags": [], "refsource": "GENTOO"}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-0816.html", "name": "RHSA-2015:0816", "tags": [], "refsource": "REDHAT"}, {"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html", "name": "openSUSE-SU-2015:0748", "tags": [], "refsource": "SUSE"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-1236", "ASSIGNER": "security@google.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2015-04-19T10:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "42.0.2311.60"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-01-03T02:59Z"}