PT-2015-1190 · Opera+3 · Opera+3

K0R3Ph1L · Published 2015-05-19 · Updated 2024-06-15 · CVE-2015-1251

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Opera versions prior to 43.0.2357.65 (no specific version range provided)

Description A use-after-free issue in the SpeechRecognitionClient implementation within the Speech subsystem allows remote attackers to execute arbitrary code via a crafted document. This issue can be exploited by attackers to gain control over affected systems.

Recommendations For Google Chrome versions prior to 43.0.2357.65, update to version 43.0.2357.65 or later to resolve the issue. For Opera, since the specific fixed version is not provided, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2015-1589

BDU:2015-10124

CVE-2015-1251

DSA-3267-1

MGASA-2015-0235

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2015:1023

RHSA-2015_1023

ZDI-15-236

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

References · 2460

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-1242.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-1268 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269 · Security Note
• https://bdu.fstec.ru/vul/2015-10130 · Security Note
• https://bdu.fstec.ru/vul/2015-09964 · Security Note
• https://bdu.fstec.ru/vul/2015-09968 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3333 · Security Note
• https://bdu.fstec.ru/vul/2015-10139 · Security Note
• https://bdu.fstec.ru/vul/2015-09967 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1251 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1243 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10133 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1258 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267 · Security Note