CVE-2015-6762

High

Published: 15/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The CSSFontFaceSrcValue::fetch function in the CSS implementation in Blink, used in Google Chrome before version 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL. This allows remote web servers to bypass the Same Origin Policy via a redirect.

Risk Assessment

Organizations may be exposed to attacks that exploit this vulnerability to bypass browser security policies, potentially leading to unauthorized access to resources.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Google Chrome (przed wersją 46.0.2490.71)

CVE-2015-6755High
The ContainerNode::parserInsertBefore function in Blink, used in Google Chrome before version 46.0.2490.71, proceeds with a DOM tree insertion in cases where a parent node no longer contains a child node. This allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

Original NVD description (English source)

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.