Ubuntu.comUB:CVE-2011-5319CVE-2011-5319
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
78.0%
content/renderer/device_sensors/device_motion_event_pump.cc in Google
Chrome before 41.0.2272.76 does not properly restrict access to high-rate
accelerometer data, which makes it easier for remote attackers to capture
keystrokes via a crafted web site that listens for ondevicemotion events, a
different vulnerability than CVE-2015-1231.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | chromium-browser | < 41.0.2272.76-0ubuntu0.14.04.1.1076 | UNKNOWN |
| ubuntu | 14.10 | noarch | chromium-browser | < 41.0.2272.76-0ubuntu0.14.10.1.1118 | UNKNOWN |
| ubuntu | 15.04 | noarch | chromium-browser | < 41.0.2272.76-0ubuntu1.1134 | UNKNOWN |
| ubuntu | 15.10 | noarch | chromium-browser | < 41.0.2272.76-0ubuntu1.1134 | UNKNOWN |
References
dl.acm.org/citation.cfm?id=2046771
googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
www.cc.gatech.edu/~traynor/papers/traynor-ccs11.pdf
code.google.com/p/chromium/issues/detail?id=421691
code.google.com/p/chromium/issues/detail?id=463349
launchpad.net/bugs/cve/CVE-2011-5319
nvd.nist.gov/vuln/detail/CVE-2011-5319
security-tracker.debian.org/tracker/CVE-2011-5319
www.cve.org/CVERecord?id=CVE-2011-5319
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
78.0%