Lucene search

K
archlinuxArch LinuxASA-201503-5
HistoryMar 05, 2015 - 12:00 a.m.

chromium: multiple issues

2015-03-0500:00:00
Arch Linux
lists.archlinux.org
15

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

91.4%

  • CVE-2015-1212:

Out-of-bounds write in media.

  • CVE-2015-1213, CVE-2015-1214, CVE-2015-1215:

Out-of-bounds write in skia filters.

  • CVE-2015-1216:

Use-after-free in v8 bindings.

  • CVE-2015-1217:

Type confusion in v8 bindings.

  • CVE-2015-1218:

Use-after-free in dom.

  • CVE-2015-1219:

Integer overflow in webgl.

  • CVE-2015-1220:

Use-after-free in gif decoder.

  • CVE-2015-1221:

Use-after-free in web databases.

  • CVE-2015-1222:

Use-after-free in service workers.

  • CVE-2015-1223:

Use-after-free in dom.

  • CVE-2015-1224:

Out-of-bounds read in vpxdecoder.

  • CVE-2015-1225:

Out-of-bounds read in pdfium.

  • CVE-2015-1226:

Validation issue in debugger.

  • CVE-2015-1227:

Uninitialized value in blink.

  • CVE-2015-1228:

Uninitialized value in rendering.

  • CVE-2015-1229:

Cookie injection via proxies.

  • CVE-2015-1230:

Type confusion in v8.

  • CVE-2015-1231:

Various fixes from internal audits, fuzzing and other initiatives.

OSVersionArchitecturePackageVersionFilename
anyanyanychromium< 41.0.2272.76-1UNKNOWN

References

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

91.4%