Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1264
Reference (s):
- BID:74723
- URL: http://www.securityfocus.com/bid/74723
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- https://code.google.com/p/chromium/issues/detail?id=481015
- DEBIAN:DSA-3267