CVE-2015-1298

Publication date 3 September 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.

Status

Package Ubuntu Release Status
chromium-browser 15.10 wily
Fixed 45.0.2454.85-0ubuntu1.1198
15.04 vivid
Fixed 45.0.2454.85-0ubuntu0.15.04.1.1181
14.04 LTS trusty
Fixed 45.0.2454.85-0ubuntu0.14.04.1.1097
12.04 LTS precise Ignored
oxide-qt 15.10 wily
Not affected
15.04 vivid
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise Not in release