Google Chrome before 42.0.2311.90 does not properly... · CVE-2015-1241 · GitHub Advisory Database · GitHub

Google Chrome before 42.0.2311.90 does not properly...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Feb 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

References

Published by the National Vulnerability Database

Apr 19, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Feb 4, 2024

Weaknesses

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Learn more on MITRE.

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Learn more on MITRE.