CVE

Id
78493  
CVE No.
CVE-2015-1216  
Status
Candidate  
Description
Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
716580 78493 CVE-2015-1216 CONFIRM:http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html  View
716581 78493 CVE-2015-1216 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=454954  View
716582 78493 CVE-2015-1216 CONFIRM:https://src.chromium.org/viewvc/blink?revision=189574&view=revision  View
716583 78493 CVE-2015-1216 GENTOO:GLSA-201503-12  View
716584 78493 CVE-2015-1216 URL:https://security.gentoo.org/glsa/201503-12  View
716585 78493 CVE-2015-1216 REDHAT:RHSA-2015:0627  View
716586 78493 CVE-2015-1216 URL:http://rhn.redhat.com/errata/RHSA-2015-0627.html  View
716587 78493 CVE-2015-1216 UBUNTU:USN-2521-1  View
716588 78493 CVE-2015-1216 URL:http://www.ubuntu.com/usn/USN-2521-1  View
716589 78493 CVE-2015-1216 BID:72901  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7959 JVNDB-2015-003279 Google Chrome で使用される Blink の bindings/scripts/v8_types.py における同一生成元ポリシーを回避される脆弱性 Google Chrome で使用される Blink の bindings/scripts/v8_types.py は、戻り値の DOM ラッパーに対するコンテキストの作成を適切に選択しないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2015-1268 78493 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003279.html  View