CVE ID:	CVE-2015-1302
Description:	The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.
Test IDs:	1.3.6.1.4.1.25623.1.0.806568   1.3.6.1.4.1.25623.1.0.806569   1.3.6.1.4.1.25623.1.0.131131   1.3.6.1.4.1.25623.1.0.806570   1.3.6.1.4.1.25623.1.0.703415
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1302 BugTraq ID: 77537 http://www.securityfocus.com/bid/77537 Debian Security Information: DSA-3415 (Google Search) http://www.debian.org/security/2015/dsa-3415 https://security.gentoo.org/glsa/201603-09 RedHat Security Advisories: RHSA-2015:1841 http://rhn.redhat.com/errata/RHSA-2015-1841.html http://www.securitytracker.com/id/1034132 SuSE Security Announcement: openSUSE-SU-2015:2068 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00120.html SuSE Security Announcement: openSUSE-SU-2015:2069 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00121.html