CVE:CVE-2015-1286
CNNVD:CNNVD-201507-727
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
Google Chrome 44.0.2403.89之前版本的extensions/renderer/v8_context_native_handler.cc文件中的‘V8ContextNativeHandler::GetModuleSystem’函数存在跨站脚本漏洞。远程攻击者可借助缺少的V8的上下文限制利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade redhat enterprise_linux_desktop_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.7z,and avoid the version 6.7z; Upgrade redhat enterprise_linux_workstation_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade google chrome to a higher version than 43.0.2357.134,and avoid the version (,43.0.2357.134]