CVE:CVE-2015-1285
CNNVD:CNNVD-201507-726
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Blink是美国谷歌（Google）公司和挪威欧朋（Opera Software）公司共同开发的一套浏览器排版引擎（渲染引擎）。
Google Chrome 44.0.2403.89之前版本中使用的Blink中的XSS审计程序中的core/html/parser/XSSAuditor.cpp文件中的‘XSSAuditor::canonicalize’函数存在安全漏洞，该漏洞源于程序没有正确选择截断点。远程攻击者可通过实施linear-time攻击利用该漏洞获取敏感信息。
solution:Upgrade redhat enterprise_linux_desktop_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.7z,and avoid the version 6.7z; Upgrade redhat enterprise_linux_workstation_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade google chrome to a higher version than 43.0.2357.134,and avoid the version (,43.0.2357.134]