CVE

Id
78497  
CVE No.
CVE-2015-1220  
Status
Candidate  
Description
Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
716622 78497 CVE-2015-1220 CONFIRM:http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html  View
716623 78497 CVE-2015-1220 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=437651  View
716624 78497 CVE-2015-1220 CONFIRM:https://src.chromium.org/viewvc/blink?revision=188423&view=revision  View
716625 78497 CVE-2015-1220 GENTOO:GLSA-201503-12  View
716626 78497 CVE-2015-1220 URL:https://security.gentoo.org/glsa/201503-12  View
716627 78497 CVE-2015-1220 REDHAT:RHSA-2015:0627  View
716628 78497 CVE-2015-1220 URL:http://rhn.redhat.com/errata/RHSA-2015-0627.html  View
716629 78497 CVE-2015-1220 UBUNTU:USN-2521-1  View
716630 78497 CVE-2015-1220 URL:http://www.ubuntu.com/usn/USN-2521-1  View
716631 78497 CVE-2015-1220 BID:72901  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8586 JVNDB-2015-003906 Google Chrome の GPU プロセスの実装におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の GPU プロセスの実装には、content/browser/gpu/browser_gpu_channel_host_factory.cc および content/renderer/render_thread_impl.cc に関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-1272 78497 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003906.html  View