18 Avr 2015

CVE-2015-1248

Publié par . Publié dans Bypass something

Vulnerability Details : CVE-2015-1248

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.
Publish Date : 2015-04-19 Last Update Date : 2015-04-20

- CVSS Scores & Vulnerability Types

CVSS Score	4.3
Confidentiality Impact	None(There is no impact to the confidentiality of the system.)
Integrity Impact	Partial(Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	None(There is no impact to the availability of the system.)
Access Complexity	Medium(The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Bypass a restriction or similar
CWE ID	264

- Related OVAL Definitions

Title	Definition Id	Class	Family
RHSA-2015:0816: chromium-browser security update (Important)	oval:com.redhat.rhsa:def:20150816		unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2015-1248

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Google	Chrome	40.0.2214.85				Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Google	Chrome	1

- References For CVE-2015-1248

https://code.google.com/p/chromium/issues/detail?id=380663 CONFIRM

http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html CONFIRM

- Metasploit Modules Related To CVE-2015-1248

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)

CVE-2015-1248

Vulnerability Details : CVE-2015-1248

- CVSS Scores & Vulnerability Types

- Related OVAL Definitions

- Products Affected By CVE-2015-1248

- Number Of Affected Versions By Product

- References For CVE-2015-1248

- Metasploit Modules Related To CVE-2015-1248

Notre expertise cybersécurité validée par de multiples certifications informatiques

Newsletter Cybersécurité

Ressources Sécurité

Pour nous Contacter