CVE-2015-1241 | BDVDB-2026-69121 Detail
Description#
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://rhn.redhat.com/errata/RHSA-2015-0816.html
- https://codereview.chromium.org/660663002
- http://ubuntu.com/usn/usn-2570-1
- https://codereview.chromium.org/717573004
- http://www.debian.org/security/2015/dsa-3238
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
- https://security.gentoo.org/glsa/201506-04
- http://www.securitytracker.com/id/1032209
- https://codereview.chromium.org/868123002
- https://codereview.chromium.org/628763003
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- https://code.google.com/p/chromium/issues/detail?id=418402
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.