browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a device's physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited.

Several vulnerabilities were discovered in the chromium web browser.

  - CVE-2015-1235     A Same Origin Policy bypass issue was discovered in the     HTML parser.

  - CVE-2015-1236     Amitay Dobo discovered a Same Origin Policy bypass in     the Web Audio API.

  - CVE-2015-1237     Khalil Zhani discovered a use-after-free issue in IPC.

  - CVE-2015-1238     'cloudfuzzer' discovered an out-of-bounds write in the     skia library.

  - CVE-2015-1240     'w3bd3vil' discovered an out-of-bounds read in the WebGL     implementation.

  - CVE-2015-1241     Phillip Moon and Matt Weston discovered a way to trigger     local user interface actions remotely via a crafted     website.

  - CVE-2015-1242     A type confusion issue was discovered in the v8     JavaScript library.

  - CVE-2015-1244     Mike Ruddy discovered a way to bypass the HTTP Strict     Transport Security policy.

  - CVE-2015-1245     Khalil Zhani discovered a use-after-free issue in the     pdfium library.

  - CVE-2015-1246     Atte Kettunen discovered an out-of-bounds read issue in     webkit/blink.

  - CVE-2015-1247     Jann Horn discovered that 'file:' URLs in OpenSearch     documents were not sanitized, which could allow local     files to be read remotely when using the OpenSearch     feature from a crafted website.

  - CVE-2015-1248     Vittorio Gambaletta discovered a way to bypass the     SafeBrowsing feature, which could allow the remote     execution of a downloaded executable file.

  - CVE-2015-1249     The chrome 41 development team found various issues from     internal fuzzing, audits, and other studies.

  - CVE-2015-3333     Multiple issues were discovered and fixed in v8     4.2.7.14.

  - CVE-2015-3334     It was discovered that remote websites could capture     video data from attached web cameras without permission.

  - CVE-2015-3336     It was discovered that remote websites could cause user     interface disruptions like window fullscreening and     mouse pointer locking.

Chromium was updated to latest stable release 42.0.2311.90 to fix security issues and bugs. The following vulnerabilities were fixed :

  - CVE-2015-1235: Cross-origin-bypass in HTML parser.

  - CVE-2015-1236: Cross-origin-bypass in Blink.

  - CVE-2015-1237: Use-after-free in IPC.

  - CVE-2015-1238: Out-of-bounds write in Skia.

  - CVE-2015-1240: Out-of-bounds read in WebGL.

  - CVE-2015-1241: Tap-Jacking.

  - CVE-2015-1242: Type confusion in V8.

  - CVE-2015-1244: HSTS bypass in WebSockets.

  - CVE-2015-1245: Use-after-free in PDFium.

  - CVE-2015-1246: Out-of-bounds read in Blink.

  - CVE-2015-1247: Scheme issues in OpenSearch.

  - CVE-2015-1248: SafeBrowsing bypass.

  - CVE-2015-1249: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2015-3333: Multiple vulnerabilities in V8 fixed at     the tip of the 4.2 branch (currently 4.2.77.14).

  - CVE-2015-3336: fullscreen and UI locking without user     confirmeation

  - CVE-2015-3335: unspecified impact of crafed programs     running in NaCl sandbox 

  - CVE-2015-3334: 'Media: Allowed by you' sometimes not     shown in a permissions table

New functionality added :

  - A number of new apps, extension and Web Platform APIs     (including the Push API!)

  - Lots of under the hood changes for stability and     performance

ID	Name	Product	Family	Type	Severity
83120	Debian DSA-3238-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	Local	high
83025	openSUSE Security Update : Chromium (openSUSE-2015-320)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2015-3334

medium

Tenable Plugins

high

high