PT-2015-5216 · Oxide+1 · Oxide-Qt+1

Published 2015-09-08 · Updated 2017-08-10 · CVE-2015-1332

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions oxide-qt versions prior to 1.9.1

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted website, exploiting the oxide::JavaScriptDialogManager function.

Recommendations For versions prior to 1.9.1, update to version 1.9.1 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-1332

USN-2735-1

Affected Products

Ubuntu

Oxide-Qt

References · 33

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1299 · Security Note
• https://ubuntu.com/security/CVE-2015-1294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1292 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2735-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11285 · Security Note
• https://ubuntu.com/security/CVE-2015-1332 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11284 · Security Note
• https://ubuntu.com/security/CVE-2015-1300 · Vendor Advisory
• http://ubuntu.com/usn/USN-2735-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1301 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1300 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1332 · Security Note
• https://bdu.fstec.ru/vul/2015-11276 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1292 · Security Note