Lucene search

K
cvelistChromeCVELIST:CVE-2015-1227
HistoryMar 09, 2015 - 12:00 a.m.

CVE-2015-1227

2015-03-0900:00:00
Chrome
www.cve.org

6.1 Medium

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.