Vulnerability Name: | CVE-2015-1260 (CCN-103272) | ||||||||||||||||||||||||||||||||
Assigned: | 2015-05-19 | ||||||||||||||||||||||||||||||||
Published: | 2015-05-19 | ||||||||||||||||||||||||||||||||
Updated: | 2017-01-03 | ||||||||||||||||||||||||||||||||
Summary: | Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request. CWE-416: Use After Free | ||||||||||||||||||||||||||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
4.7 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||||||
Vulnerability Type: | CWE-Other | ||||||||||||||||||||||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2015-1260 Source: CCN Type: Google Chrome Releases Web site Stable Channel Update Source: CONFIRM Type: Patch, Vendor Advisory http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html Source: SUSE Type: UNKNOWN openSUSE-SU-2015:0969 Source: SUSE Type: UNKNOWN openSUSE-SU-2015:1877 Source: DEBIAN Type: UNKNOWN DSA-3267 Source: BID Type: UNKNOWN 74723 Source: CCN Type: BID-74723 Google Chrome Prior to 43.0.2357.65 Multiple Security Vulnerabilities Source: SECTRACK Type: UNKNOWN 1032375 Source: CONFIRM Type: UNKNOWN https://code.google.com/p/chromium/issues/detail?id=474370 Source: CONFIRM Type: UNKNOWN https://codereview.chromium.org/1075833002 Source: XF Type: UNKNOWN google-chrome-cve20151260-code-exec(103272) Source: GENTOO Type: UNKNOWN GLSA-201506-04 Source: CCN Type: WhiteSource Vulnerability Database CVE-2015-1260 | ||||||||||||||||||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration RedHat 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||
BACK |