CVE

Id
78522  
CVE No.
CVE-2015-1245  
Status
Candidate  
Description
Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
716948 78522 CVE-2015-1245 CONFIRM:http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html  View
716949 78522 CVE-2015-1245 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=444957  View
716950 78522 CVE-2015-1245 CONFIRM:https://codereview.chromium.org/831283002  View
716951 78522 CVE-2015-1245 DEBIAN:DSA-3238  View
716952 78522 CVE-2015-1245 URL:http://www.debian.org/security/2015/dsa-3238  View
716953 78522 CVE-2015-1245 GENTOO:GLSA-201506-04  View
716954 78522 CVE-2015-1245 URL:https://security.gentoo.org/glsa/201506-04  View
716955 78522 CVE-2015-1245 REDHAT:RHSA-2015:0816  View
716956 78522 CVE-2015-1245 URL:http://rhn.redhat.com/errata/RHSA-2015-0816.html  View
716957 78522 CVE-2015-1245 SUSE:openSUSE-SU-2015:1887  View
716958 78522 CVE-2015-1245 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html  View
716959 78522 CVE-2015-1245 SUSE:openSUSE-SU-2015:0748  View
716960 78522 CVE-2015-1245 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html  View
716961 78522 CVE-2015-1245 SECTRACK:1032209  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9250 JVNDB-2015-004570 Google Chrome の extensions/browser/api/web_request/web_request_api.cc の WebRequest API の実装におけるアクセス制限を回避される脆弱性 Google Chrome の extensions/browser/api/web_request/web_request_api.cc の WebRequest API の実装は、リクエストを受け入れる前にリクエストのソースを適切に考慮しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2015-1297 78522 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004570.html  View