CVE-2015-1298

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure…

published September 3, 2015

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01328 · 70.8th percentile
Published
2015-09-03T22:00Z
EPSS history
Timeline
  • 03 SEP 22:00Z
    The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure…
    cvelistv5