CVE-2015-1241
Publication date 19 April 2015
Last updated 24 July 2024
Ubuntu priority
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | ||
14.04 LTS trusty |
Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089
|
|
oxide-qt | ||
14.04 LTS trusty |
Fixed 1.6.5-0ubuntu0.14.04.1
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2570-1
- Oxide vulnerabilities
- 27 April 2015
Other references
- https://codereview.chromium.org/868123002
- https://codereview.chromium.org/717573004
- https://codereview.chromium.org/660663002
- https://codereview.chromium.org/628763003
- https://code.google.com/p/chromium/issues/detail?id=418402
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
- https://www.cve.org/CVERecord?id=CVE-2015-1241