Vulnerability CVE-2015-6782: Information

Description

The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site.

Severity: MEDIUM (4.3)

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-6782
Published: Dec. 6, 2015
Modified: Nov. 7, 2023
Error type identifier: CWE-20

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus47.0.2526.73-alt1125.0.6422.141-alt1ALT-PU-2015-2054-1154152Fixed
chromiump1047.0.2526.73-alt1119.0.6045.159-alt0.p10.1ALT-PU-2015-2054-1154152Fixed
chromiump947.0.2526.73-alt197.0.4692.99-alt0.p9.1ALT-PU-2015-2054-1154152Fixed
chromiumc10f147.0.2526.73-alt1110.0.5481.177-alt1.p10.1ALT-PU-2015-2054-1154152Fixed
chromiumc9f247.0.2526.73-alt184.0.4147.105-alt1.1.p9ALT-PU-2015-2054-1154152Fixed
chromiump1147.0.2526.73-alt1125.0.6422.141-alt1ALT-PU-2015-2054-1154152Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
    USN-2825-1
      https://code.google.com/p/chromium/issues/detail?id=536652
        openSUSE-SU-2015:2290
          GLSA-201603-09
            78416
              DSA-3415
                openSUSE-SU-2015:2291
                  https://codereview.chromium.org/1415773002/
                    1034298

                        1. Configuration 1

                          cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
                          End including
                          46.0.2490.86
                      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                      Version: v24.5.3
                      Back to top