content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events, a different vulnerability than CVE-2015-1231.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-03-09T00:00:00
Updated: 2024-08-06T13:55:04.115Z
Reserved: 2015-03-08T00:00:00
Link: CVE-2014-9689
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-03-09T00:59:02.450
Modified: 2015-03-09T17:51:13.727
Link: CVE-2014-9689
Redhat
No data.