Security Advisory

CVE-2015-2239

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-03-09 00:00:00
Last updated 2024-08-06 05:10:15
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveraging (1) a compromised search engine or (2) an XSS vulnerability in a search engine, a different vulnerability than CVE-2015-1231.