CVE:CVE-2015-1281
CNNVD:CNNVD-201507-722
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Blink是美国谷歌（Google）公司和挪威欧朋（Opera Software）公司共同开发的一套浏览器排版引擎（渲染引擎）。
Google Chrome 44.0.2403.89之前版本中使用的Blink中的core/loader/ImageLoader.cpp文件存在安全漏洞，该漏洞源于程序没有正确设置图像下载程序microtask中的ScriptState。远程攻击者可利用该漏洞绕过Content Security Policy(CSP)限制。
solution:Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade google chrome to a higher version than 43.0.2357.134,and avoid the version (,43.0.2357.134]; Upgrade redhat enterprise_linux_desktop_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.7z,and avoid the version 6.7z; Upgrade redhat enterprise_linux_workstation_supplementary to a higher version than 6.0,and avoid the version 6.0