CVE:CVE-2015-1244
CNNVD:CNNVD-201504-395
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
Google Chrome 42.0.2311.90之前版本的url_request/url_request.cc文件中的‘URLRequest::GetHSTSRedirect’函数中存在安全漏洞，该漏洞源于程序激活HSTS Policy时，没有用wss方案代替ws方案。远程攻击者可通过嗅探网络中的WebSocket流量利用该漏洞获取敏感信息。
solution:Upgrade canonical ubuntu_linux to a higher version than 14.04,14.10,15.04,and avoid the version 14.04,14.10,15.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade google chrome to a higher version than 42.0.2311.60,and avoid the version (,42.0.2311.60]