PT-2015-5196 · Qt+3 · Qtwebenginecore+4

Yongjun Liu · Published 2015-07-21 · Updated 2018-02-02 · CVE-2015-1290

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 QtWebEngineCore in Qt versions prior to 5.5.1

Description The issue allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.

Recommendations For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later. For QtWebEngineCore in Qt versions prior to 5.5.1, update to version 5.5.1 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1729

ALT-PU-2015-1901

ALT-PU-2015-1902

ALT-PU-2015-1903

ALT-PU-2015-1904

ALT-PU-2015-1905

ALT-PU-2015-1906

ALT-PU-2015-1907

ALT-PU-2015-1908

ALT-PU-2015-1909

ALT-PU-2015-1910

ALT-PU-2015-1911

ALT-PU-2015-1912

ALT-PU-2015-1913

ALT-PU-2015-1914

ALT-PU-2015-1915

ALT-PU-2015-1916

ALT-PU-2015-1917

ALT-PU-2015-1918

ALT-PU-2015-1919

ALT-PU-2015-1920

ALT-PU-2016-1482

CVE-2015-1290

Affected Products

Alt Linux

Google Chrome

Opera

Qt

Qtwebenginecore

References · 100

• https://nvd.nist.gov/vuln/detail/CVE-2015-1290 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1271 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280 · Security Note
• https://bdu.fstec.ru/vul/2015-10879 · Security Note
• https://bdu.fstec.ru/vul/2015-11027 · Security Note
• https://bdu.fstec.ru/vul/2015-11285 · Security Note
• https://bdu.fstec.ru/vul/2015-11021 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1916 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5605 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1288 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1901 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11332 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1912 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11331 · Security Note