PT-2015-1195 · Google+4 · Google Chrome+4
Publicado
2015-05-19
·
Atualizado
2024-06-15
·
CVE-2015-1256
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 43.0.2357.65
Description
The issue is caused by a use-after-free vulnerability in the SVG implementation in Blink. This vulnerability can be exploited by remote attackers using a specially crafted document, potentially leading to a denial of service or other unspecified impacts. The exploitation leverages improper handling of a shadow tree for a
use element.Recommendations
For Google Chrome versions prior to 43.0.2357.65, update to version 43.0.2357.65 or later to resolve the issue. As a temporary workaround, consider avoiding the use of SVG documents that could leverage the improper handling of a shadow tree for a
use element until a patch is applied.Exploit
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Red Hat
Ubuntu