CVE

Id
78528  
CVE No.
CVE-2015-1251  
Status
Candidate  
Description
Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.  
Phase
Assigned (20150121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
717061 78528 CVE-2015-1251 BUGTRAQ:20161123 CVE-2015-1251: Chrome blink SpeechÂ-RecognitionÂ-Controller use-after-free details  View
717062 78528 CVE-2015-1251 URL:http://www.securityfocus.com/archive/1/archive/1/539824/100/0/threaded  View
717063 78528 CVE-2015-1251 FULLDISC:20161125 CVE-2015-1251: Chrome blink Speech­Recognition­Controller use-after-free details  View
717064 78528 CVE-2015-1251 URL:http://seclists.org/fulldisclosure/2016/Nov/136  View
717065 78528 CVE-2015-1251 MISC:http://zerodayinitiative.com/advisories/ZDI-15-236/  View
717066 78528 CVE-2015-1251 MISC:http://blog.skylined.nl/20161123001.html  View
717067 78528 CVE-2015-1251 CONFIRM:http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html  View
717068 78528 CVE-2015-1251 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=481015  View
717069 78528 CVE-2015-1251 DEBIAN:DSA-3267  View
717070 78528 CVE-2015-1251 URL:http://www.debian.org/security/2015/dsa-3267  View
717071 78528 CVE-2015-1251 GENTOO:GLSA-201506-04  View
717072 78528 CVE-2015-1251 URL:https://security.gentoo.org/glsa/201506-04  View
717073 78528 CVE-2015-1251 SUSE:openSUSE-SU-2015:1877  View
717074 78528 CVE-2015-1251 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html  View
717075 78528 CVE-2015-1251 SUSE:openSUSE-SU-2015:0969  View
717076 78528 CVE-2015-1251 URL:http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html  View
717077 78528 CVE-2015-1251 BID:74723  View
717078 78528 CVE-2015-1251 URL:http://www.securityfocus.com/bid/74723  View
717079 78528 CVE-2015-1251 SECTRACK:1032375  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9867 JVNDB-2015-005187 Google Chrome で使用される Blink の bindings/core/v8/V8DOMWrapper.h における同一生成元ポリシーを回避される脆弱性 Google Chrome で使用される Blink の bindings/core/v8/V8DOMWrapper.h は、cross-context 例外を再スローアクションしないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2015-1303 78528 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005187.html  View