CVE-2015-1287

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera (affected versions not specified)

Description The issue enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type. This allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.

Recommendations For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.