CVE-2015-1248 in Chrome
Summary
The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
01/21/2015
Disclosure
04/19/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75006 | Google Chrome SafeBrowsing access control | 264 | Unproven | Official fix | CVE-2015-1248 |