CVE-2015-1248

Publication date 19 April 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.

Status

Package Ubuntu Release Status
chromium-browser 15.10 wily
Fixed 43.0.2357.81-0ubuntu1.1179
15.04 vivid
Fixed 43.0.2357.81-0ubuntu0.15.04.1.1170
14.10 utopic
Fixed 43.0.2357.81-0ubuntu0.14.10.1.1131
14.04 LTS trusty
Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089
12.04 LTS precise Ignored
10.04 LTS lucid Ignored end of life
oxide-qt 15.10 wily
Not affected
15.04 vivid
Not affected
14.10 utopic
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release

References

Other references