CVE ID:	CVE-2015-1236
Description:	The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.
Test IDs:	1.3.6.1.4.1.25623.1.0.703238
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1236 Debian Security Information: DSA-3238 (Google Search) http://www.debian.org/security/2015/dsa-3238 https://security.gentoo.org/glsa/201506-04 RedHat Security Advisories: RHSA-2015:0816 http://rhn.redhat.com/errata/RHSA-2015-0816.html http://www.securitytracker.com/id/1032209 SuSE Security Announcement: openSUSE-SU-2015:0748 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html SuSE Security Announcement: openSUSE-SU-2015:1887 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html http://ubuntu.com/usn/usn-2570-1