Lucene search

K
archlinuxArch LinuxASA-201502-5
HistoryFeb 06, 2015 - 12:00 a.m.

chromium: multiple issues

2015-02-0600:00:00
Arch Linux
lists.archlinux.org
23

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

87.5%

  • CVE-2015-1209 (use-after-free)

Use-after-free in DOM, possibly leading to arbitrary code execution.
Credit to Maksymillian Motyl.

  • CVE-2015-1210 (cross-origin bypass)

Cross-origin-bypass in V8 bindings allows an attacker to bypass the
same-origin policy.

  • CVE-2015-1211 (privilege escalation)

Privilege escalation using service workers.

  • CVE-2015-1212

Various fixes from internal audits, fuzzing and other initiatives,
fixing unspecified vulnerabilities not disclosed by upstream.

OSVersionArchitecturePackageVersionFilename
anyanyanychromium< 40.0.2214.111-1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

87.5%