PT-2015-1054 · Opera+5 · Opera+5
Publicado
2015-04-01
·
Atualizado
2024-06-15
·
CVE-2015-1234
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 41.0.2272.118
Opera versions prior to 41.0.2272.118
Description
The issue is related to a race condition in the gpu/command buffer/service/gles2 cmd decoder.cc component, allowing remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.
Recommendations
For Google Chrome versions prior to 41.0.2272.118, update to version 41.0.2272.118 or later.
For Opera versions prior to 41.0.2272.118, update to a version that includes the fix for this issue, as the specific version is not provided.
As a temporary workaround, consider restricting the use of OpenGL ES commands in the affected component until a patch is available.
Exploit
Correção
DoS
Race Condition
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu