PT-2015-5183 · Google+5 · Google Chrome+5

Publicado

2015-03-03

·

Atualizado

2024-06-15

·

CVE-2015-1228

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76
Description The issue is related to the RenderCounter::updateCounter function in Blink, which does not force a relayout operation and consequently does not initialize memory for a data structure. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.
Recommendations For Google Chrome versions prior to 41.0.2272.76, update to version 41.0.2272.76 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted CSS token sequences to minimize the risk of exploitation.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2015-1298
CVE-2015-1228
MGASA-2015-0123
OPENSUSE-SU-2015_0505-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0627
RHSA-2015_0627
USN-2521-1

Produtos afetados

Alt Linux
Google Chrome
Opera
Red Hat
Suse
Ubuntu