| Vulnerability Name: | CVE-2015-1290 (CCN-138044) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2015-01-21 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2018-01-09 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2018-02-02 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
7.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: CONFIRM Type: Release Notes, Third Party Advisory http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1 Source: MITRE Type: CNA CVE-2015-1290 Source: CONFIRM Type: Vendor Advisory http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html Source: SUSE Type: Issue Tracking, Third Party Advisory openSUSE-SU-2015:2368 Source: MISC Type: Issue Tracking, Third Party Advisory http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80 Source: CONFIRM Type: Issue Tracking, Vendor Advisory https://bugs.chromium.org/p/chromium/issues/detail?id=505374 Source: CCN Type: Google Chrome Releases Web site Stable Channel Update Source: CONFIRM Type: Issue Tracking, Patch, Vendor Advisory https://codereview.chromium.org/1233453004 Source: XF Type: UNKNOWN google-chrome-cve20151290-code-exec(138044) Source: CCN Type: Qt Web site Qt | Cross-platform software development for embedded & desktop | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||