Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1226 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=456841 - http://www.securityfocus.com/bid/72901 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com
?id=456841 - http://www.securityfocus.com/bid/72901 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com/errata/RHSA-2015-0627.html - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://codereview.chromium.org/910053002
CVE ID: CVE-2015-1227 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://code.google.com/p/chromium/issues/detail?id
ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://code.google.com/p/chromium/issues/detail?id=450389 - https://security.gentoo.org/glsa/201503-12 - https://src.chromium.org/viewvc/blink?revision=189585&view=revision - http://rhn.redhat.com/errata/RHSA-2015-0627.html - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://src.chromium.org/viewvc/blink?revision=189816&view=revision
CVE ID: CVE-2015-1228 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id
ce. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=444707 - http://www.ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com/errata/RHSA-2015-0627.html - https://src.chromium.org/viewvc/blink?revision=188180&view=revision - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
CVE ID: CVE-2015-1229 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://code.google.com/p/chromium/issues/detail?id=431504 - https://codereview.chromium.org/769043003 -
com/bid/72901 - https://code.google.com/p/chromium/issues/detail?id=431504 - https://codereview.chromium.org/769043003 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com/errata/RHSA-2015-0627.html - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
CVE ID: CVE-2015-1230 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://security
ontainer: References: - http://www.ubuntu.com/usn/USN-2521-1 - http://www.securityfocus.com/bid/72901 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com/errata/RHSA-2015-0627.html - https://code.google.com/p/chromium/issues/detail?id=449610 - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://src.chromium.org/viewvc/blink?revision=189006&view=revision
CVE ID: CVE-2015-1231 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=406871 - https://code.google.com/p/chromium/issues/detail?id=449049 - https://code.google.com/p/chromium/issues/detail?id=445831 - https://code.google.com/p/chromium/issues/detail?id=451755 - https://code.google.com/p/chromium/issues/detail?id=4
831 - https://code.google.com/p/chromium/issues/detail?id=451755 - https://code.google.com/p/chromium/issues/detail?id=452324 - https://code.google.com/p/chromium/issues/detail?id=433078 - https://code.google.com/p/chromium/issues/detail?id=450653 - https://code.google.com/p/chromium/issues/detail?id=404300 - https://code.google.com/p/chromium/issues/detail?id=453994 - http://www.ubuntu.com/usn/USN-2521-1 - https://code.google.com/p/chromium/issues/detail?id=451753 - https://code.google.com/p/chromium/issues/detail?id=453126 - https://code.google.com/p/chromium/issues/detail?id=452455 - https://code.google.com/p/chromium/issues/detail?id=448056 - https://code.google.com/p/chromium/issues/det
l?id=452455 - https://code.google.com/p/chromium/issues/detail?id=448056 - https://code.google.com/p/chromium/issues/detail?id=426762 - https://code.google.com/p/chromium/issues/detail?id=429379 - https://security.gentoo.org/glsa/201503-12 - http://rhn.redhat.com/errata/RHSA-2015-0627.html - https://code.google.com/p/chromium/issues/detail?id=451685 - https://code.google.com/p/chromium/issues/detail?id=429679 - https://code.google.com/p/chromium/issues/detail?id=383777 - https://code.google.com/p/chromium/issues/detail?id=449610 - https://code.google.com/p/chromium/issues/detail?id=460145 - https://code.google.com/p/chromium/issues/detail?id=421499 - http://googlechromereleases.blogspot.com/
etail?id=460145 - https://code.google.com/p/chromium/issues/detail?id=421499 - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=450654 - https://code.google.com/p/chromium/issues/detail?id=437636 - https://code.google.com/p/chromium/issues/detail?id=449045 - https://code.google.com/p/chromium/issues/detail?id=449777 - https://code.google.com/p/chromium/issues/detail?id=463349 - https://code.google.com/p/chromium/issues/detail?id=459115 - https://code.google.com/p/chromium/issues/detail?id=438364 - https://code.google.com/p/chromium/issues/detail?id=442756 - https://code.google.com/p/chromium/issues/detail?id=438
4 - https://code.google.com/p/chromium/issues/detail?id=442756 - https://code.google.com/p/chromium/issues/detail?id=438638 - https://code.google.com/p/chromium/issues/detail?id=439877
CVE ID: CVE-2015-1232 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T04:33:20.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index that triggers an out-of-bounds write operation, a different vulnerability than CVE-2015-1212. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/907793002 - https://security.gentoo.org/g
Notes: - CVE Program Container: References: - https://codereview.chromium.org/907793002 - https://security.gentoo.org/glsa/201503-12 - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=456516
CVE ID: CVE-2015-1233 State: PUBLISHED Published: 2015-04-01T21:00:00 Last Updated: 2024-08-06T04:33:20.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=469058 - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - http://www.ubuntu.com/usn/USN-2556-1 - https://security.gentoo.o
s.opensuse.org/opensuse-updates/2015-11/msg00024.html - http://www.ubuntu.com/usn/USN-2556-1 - https://security.gentoo.org/glsa/201506-04 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html - http://www.securitytracker.com/id/1032012 - http://rhn.redhat.com/errata/RHSA-2015-0778.html - http://www.securityfocus.com/bid/73484
CVE ID: CVE-2015-1234 State: PUBLISHED Published: 2015-04-01T21:00:00 Last Updated: 2024-08-06T04:33:20.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=468936 - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html - http://www.securityfocus.com/bid/73486 - http://lists.opensuse.org/opensuse
pot.com/2015/04/stable-channel-update.html - http://www.securityfocus.com/bid/73486 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - http://www.ubuntu.com/usn/USN-2556-1 - https://security.gentoo.org/glsa/201506-04 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html - http://www.securitytracker.com/id/1032012 - http://rhn.redhat.com/errata/RHSA-2015-0778.html - https://codereview.chromium.org/1016193003
CVE ID: CVE-2015-1235 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - https://code.google.com/p/chromium/issues/detail?id=456518 - http://www.debian.org/security/2015/dsa-3238 - https://src.chromium.org/viewvc/blink?revision=1
ssues/detail?id=456518 - http://www.debian.org/security/2015/dsa-3238 - https://src.chromium.org/viewvc/blink?revision=190980&view=revision - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - http://ubuntu.com/usn/USN-2570-1 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1236 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - https://src.chromium.org/viewvc/blink?
://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - https://src.chromium.org/viewvc/blink?revision=189527&view=revision - http://www.debian.org/security/2015/dsa-3238 - https://code.google.com/p/chromium/issues/detail?id=313939 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1237 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - https:/
m/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - https://codereview.chromium.org/1007123003 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - https://code.google.com/p/chromium/issues/detail?id=461191 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1238 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/i
g/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - https://code.google.com/p/chromium/issues/detail?id=445808 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1239 State: PUBLISHED Published: 2017-10-18T17:00:00 Last Updated: 2024-08-06T04:33:20.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - https://bugs.chromium.org/p/chromium/issues/detail?id=430891
CVE ID: CVE-2015-1240 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - https://codereview.chromium.org/978193003 - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015
untu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - https://code.google.com/p/chromium/issues/detail?id=463599 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1241 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - https://codereview.chromium.org/660663002 - http://ubuntu.com/usn/usn-2570-1 - https://codereview.chromium.org/717573004 - http://www.debian.or
mium.org/660663002 - http://ubuntu.com/usn/usn-2570-1 - https://codereview.chromium.org/717573004 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - https://codereview.chromium.org/868123002 - https://codereview.chromium.org/628763003 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html - https://code.google.com/p/chromium/issues/detail?id=418402
CVE ID: CVE-2015-1242 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/
tp://rhn.redhat.com/errata/RHSA-2015-0816.html - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - https://codereview.chromium.org/1019033004 - https://codereview.chromium.org/1000893003 - http://www.securitytracker.com/id/1032209 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - https://code.google.com/p/chromium/issues/detail?id=460917 - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1243 State: PUBLISHED Published: 2015-05-01T10:00:00 Last Updated: 2024-08-06T04:33:20.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html - http://www.ubunt
CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00009.html - http://www.ubuntu.com/usn/USN-2582-1 - http://www.securitytracker.com/id/1032234 - https://src.chromium.org/viewvc/blink?revision=192655&view=revision - http://www.debian.org/security/2015/dsa-3242 - https://security.gentoo.org/glsa/201506-04 - http://rhn.redhat.com/errata/RHSA-2015-0921.html - http://www.securityfocus.com/bid/74389 - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html - https://code.google.com/p/chromium/issues/detail?id=453279
CVE ID: CVE-2015-1244 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - https://code.google.com/p/chromium/issues/detail?id=455215 - http://ubuntu.com/usn/usn-2570-1 - http
SA-2015-0816.html - https://code.google.com/p/chromium/issues/detail?id=455215 - http://ubuntu.com/usn/usn-2570-1 - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - http://www.securitytracker.com/id/1032209 - https://chromium.googlesource.com/chromium/src/net/+/2359906c4fdfa9d44b045755d23fe5327c10e010 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
CVE ID: CVE-2015-1245 State: PUBLISHED Published: 2015-04-19T10:00:00 Last Updated: 2024-08-06T04:33:20.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - ht
. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0816.html - http://www.debian.org/security/2015/dsa-3238 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html - https://security.gentoo.org/glsa/201506-04 - https://codereview.chromium.org/831283002 - http://www.securitytracker.com/id/1032209 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html - https://code.google.com/p/chromium/issues/detail?id=444957 - http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html