CVE Vulnerabilities

CVE-2015-3334

Published: Apr 19, 2015 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display Media: Allowed by you in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a devices physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited.

Affected Software

Name Vendor Start Version End Version
Chrome Google * 42.0.2311.60 (including)
Chromium-browser Ubuntu devel *
Chromium-browser Ubuntu lucid *
Chromium-browser Ubuntu precise *
Chromium-browser Ubuntu trusty *
Chromium-browser Ubuntu upstream *
Chromium-browser Ubuntu utopic *
Chromium-browser Ubuntu vivid *
Chromium-browser Ubuntu wily *

References