Unspecified vulnerability in content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome via a crafted web site (rpm)ID: oval:org.secpod.oval:def:23846 | Date: (C)2015-03-18 (M)2023-11-13 |
Class: VULNERABILITY | Family: unix |
The host is installed with Google Chrome before 41.0.2272.76 and is prone to an unspecified vulnerability. A flaw is present in content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome, which does not properly restrict access to high-rate gyroscope data. Successful exploitation makes it easier for remote attackers to obtain speech signals from a device's physical environment.