CVE:CVE-2015-1211
CNNVD:CNNVD-201502-120
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
Google Chrome的content/browser/service_worker/service_worker_dispatcher_host.cc文件中的‘OriginCanAccessServiceWorkers’函数存在安全漏洞，该漏洞源于程序在ServiceWorker注册期间，没有正确限制URI方案。远程攻击者可借助特制的filesystem: URI利用该漏洞获取权限。以下版本受到影响：基于Windows、OS X和Linux平台的Google Chrome 40.0.2214.93及之前版本，基于Android平台的Google Chrome 40.0.2214.89及之前版本。
solution:Upgrade google chrome to a higher version than 40.0.2214.109,40.0.2214.111,and avoid the version (,40.0.2214.109),(,40.0.2214.111); Upgrade canonical ubuntu_linux to a higher version than 14.04,14.10,and avoid the version 14.04,14.10; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2