PT-2015-5176 · Google+5 · Google Chrome+5

Publicado 2015-03-03 · Atualizado 2024-06-15 · CVE-2015-1221

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76

Description The issue is related to a use-after-free vulnerability in Blink, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is due to incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, and is related to the shutdown function in web/WebKit.cpp.

Recommendations For Google Chrome versions prior to 41.0.2272.76, update to version 41.0.2272.76 or later to resolve the issue.

Correção

Identificadores relacionados

ALT-PU-2015-1298

CVE-2015-1221

MGASA-2015-0123

OPENSUSE-SU-2015_0505-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2015:0627

RHSA-2015_0627

USN-2521-1

Produtos afetados

Alt Linux

Google Chrome

Opera

Red Hat

Suse

Ubuntu

Referências · 2449

• https://suse.com/security/cve/CVE-2020-15974 · Nota
• https://suse.com/security/cve/CVE-2019-13742 · Nota
• https://suse.com/security/cve/CVE-2018-6106 · Nota
• https://suse.com/security/cve/CVE-2019-5799 · Nota
• https://suse.com/security/cve/CVE-2022-1497 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2015-1293 · Nota
• https://suse.com/security/cve/CVE-2019-5801 · Nota
• https://suse.com/security/cve/CVE-2013-0899 · Nota
• https://suse.com/security/cve/CVE-2020-6397 · Nota
• https://suse.com/security/cve/CVE-2022-3449 · Nota
• https://suse.com/security/cve/CVE-2012-2815 · Nota
• https://ubuntu.com/security/CVE-2015-1227 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-30564 · Nota
• https://suse.com/security/cve/CVE-2023-0927 · Nota